Options -Indexes

# Make sure modern JS modules load with correct MIME type (some shared hostings misconfigure this)
AddType application/javascript .js .mjs
AddType text/css .css

# Security headers (safe defaults)
<IfModule mod_headers.c>
  Header set X-Content-Type-Options "nosniff"
  Header set X-Frame-Options "SAMEORIGIN"
  Header set Referrer-Policy "strict-origin-when-cross-origin"
</IfModule>

# If you want the public booking page as the homepage of the whole domain,
# uncomment the rewrite rules below.
#RewriteEngine On
#RewriteRule ^$ public/index.php [L]
