# Apache hardening for the wms-app container.

# No version banners in headers or error pages.
ServerTokens Prod
ServerSignature Off
TraceEnable Off

# The repository is mounted under the web root; its .htaccess refuses .git, .env,
# deployment folders and app internals, so it must be honoured.
<Directory /var/www/html/wms-app>
    Options -Indexes +FollowSymLinks
    AllowOverride All
    Require all granted
</Directory>

# Nothing else under the default web root is part of this app.
<Directory /var/www/html>
    Options -Indexes
</Directory>

# FORCE_HTTPS from docker-compose is read by the .htaccess redirect rule.
PassEnv FORCE_HTTPS