# Power Play: security headers for Apache and LiteSpeed (Hostinger, IONOS and most shared hosting).
DirectoryIndex index.html
AddType application/manifest+json .webmanifest
<IfModule mod_headers.c>
  Header always set Referrer-Policy "no-referrer"
  Header always set X-Content-Type-Options "nosniff"
  Header always set X-Frame-Options "SAMEORIGIN"
  Header always set Permissions-Policy "camera=(), microphone=(), geolocation=(), browsing-topics=()"
  <FilesMatch "^(sw\.js|index\.html|manifest\.webmanifest)$">
    Header set Cache-Control "no-cache"
  </FilesMatch>
</IfModule>
