# Apache Configuration for Chace SchoolPro Engine
<IfModule mod_rewrite.c>
    RewriteEngine On
    # Pastikan Header Authorization diteruskan ke PHP (terutama pada PHP CGI/FastCGI)
    RewriteCond %{HTTP:Authorization} .
    RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
</IfModule>

<IfModule mod_headers.c>
    Header set Access-Control-Allow-Headers "Authorization, Content-Type, X-Requested-With, Origin, Accept"
</IfModule>

<IfModule mod_security.c>
    SecRuleEngine Off
</IfModule>

# Blokir akses langsung ke file .env dan file konfigurasi sensitif
<FilesMatch "^\.env">
    <IfModule mod_authz_core.c>
        Require all denied
    </IfModule>
    <IfModule !mod_authz_core.c>
        Order allow,deny
        Deny from all
    </IfModule>
</FilesMatch>

