# T-minus: hardening for Apache and LiteSpeed hosts (IONOS, Hostinger and most shared hosting)
DirectoryIndex index.html
AddType application/manifest+json .webmanifest
<IfModule mod_headers.c>
  Header always set Referrer-Policy "no-referrer"
  Header always set X-Content-Type-Options "nosniff"
  Header always set X-Frame-Options "SAMEORIGIN"
  Header always set Permissions-Policy "camera=(), microphone=(), geolocation=(), browsing-topics=()"
  <FilesMatch "^(sw\.js|index\.html|manifest\.webmanifest)$">
    Header set Cache-Control "no-cache"
  </FilesMatch>
</IfModule>
