# Protect config and database files from being downloaded.
<FilesMatch "(config\.php|config\.sample\.php|\.sql)$">
  Require all denied
</FilesMatch>

# Block direct access to the shared helper.
<Files "_common.php">
  Require all denied
</Files>

# Force HTTPS (required: phone cameras only work on https).
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
