# Minimal .htaccess for testing
RewriteEngine On

# Basic security
<FilesMatch "\.(htaccess|htpasswd|ini|log)$">
    Require all denied
</FilesMatch>

# Disable directory browsing
Options -Indexes

# Basic headers (if mod_headers is available)
<IfModule mod_headers.c>
    Header always set X-Content-Type-Options nosniff
    Header always set X-Frame-Options DENY
</IfModule>