# Transmettre le header Authorization à PHP (mutualisé OVH)
RewriteEngine On
RewriteCond %{HTTP:Authorization} .
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]

# Interdire le listing des fichiers
Options -Indexes

# Protéger le dossier parties/ - accès uniquement via backup.php
<FilesMatch "\.json$">
    Deny from all
</FilesMatch>

# Autoriser les scripts PHP
<Files "backup.php">
    Allow from all
</Files>
<Files "auth.php">
    Allow from all
</Files>
