# Escudo Vital
DirectoryIndex index.php
Options -Indexes

# Bloquear archivos sensibles
<FilesMatch "\.(sql|md|log|ini|bak|sh|env)$">
    Require all denied
</FilesMatch>
<FilesMatch "^\.">
    Require all denied
</FilesMatch>

# Forzar HTTPS (descomente cuando el certificado SSL esté activo en cPanel)
# RewriteEngine On
# RewriteCond %{HTTPS} off
# RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
