# Hartasuma Helpdesk — root protections

# Never serve the schema or docs over the web.
<FilesMatch "\.(sql|md)$">
  Require all denied
</FilesMatch>

Options -Indexes

# ---------------------------------------------------------------
# OPTIONAL: extra layer so random internet visitors can't even see
# the ticket form — only people who know one shared staff password
# get in. This is separate from the admin/viewer passwords in
# config.php; it's a single company-wide credential you'd hand to
# all employees (e.g. in the SOP email). Uncomment both lines below
# and set a real password with:
#   htpasswd -c /home/YOURCPANELUSER/.htpasswds/hartasuma-helpdesk/passwd staff
# (cPanel > Directory Privacy can also generate this file for you.)
# ---------------------------------------------------------------
# AuthType Basic
# AuthName "Hartasuma staff only"
# AuthUserFile /home/YOURCPANELUSER/.htpasswds/hartasuma-helpdesk/passwd
# Require valid-user
