# Apache Server Hardening & Anti-Tampering Rules for LimitlessX Gateway

# 1. Prevent Directory Browsing
Options -Indexes

# 2. Block Direct Access to Sensitive Files
<FilesMatch "^(config\.php|\.htaccess|\.env|.*\.log|.*\.json)$">
    Order Allow,Deny
    Deny from all
</FilesMatch>

# 3. Block access to logs and orders directories
<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteRule ^logs/ - [F,L]
    RewriteRule ^orders/ - [F,L]
</IfModule>

# 4. Security Headers
<IfModule mod_headers.c>
    Header set X-Content-Type-Options "nosniff"
    Header set X-XSS-Protection "1; mode=block"
</IfModule>
