# The repo is bind-mounted as web root: never serve dotfiles (.env, .git, ...) or docker files.
RedirectMatch 404 "/\.(?!well-known/)"
RedirectMatch 404 "^/(docker/|docker-compose\.yml)"
# Module log folders (qlocmconnector logs full API requests incl. client_secret)
RedirectMatch 404 "^/modules/[^/]+/logs/"
# Installation is done via CLI (see docker-compose.yml); a web re-install would wipe the database.
RedirectMatch 404 "^/install-dev"
ServerTokens Prod
ServerSignature Off