# ════════════════════════════════════════════════════════════════
#  dermiteseborrheique.fr — Configuration Apache (.htaccess)
# ════════════════════════════════════════════════════════════════

Options -Indexes

# ── Protection fichiers sensibles ─────────────────────────────
<Files ".env">
    Order allow,deny
    Deny from all
</Files>
<Files ".env.example">
    Order allow,deny
    Deny from all
</Files>
<FilesMatch "\.(log|sql|sh|bak|backup|old)$">
    Order allow,deny
    Deny from all
</FilesMatch>

# ── En-têtes de sécurité ───────────────────────────────────────
<IfModule mod_headers.c>
    Header always set X-Frame-Options "DENY"
    Header always set X-Content-Type-Options "nosniff"
    Header always set X-XSS-Protection "1; mode=block"
</IfModule>

# ── Compression ────────────────────────────────────────────────
<IfModule mod_deflate.c>
    AddOutputFilterByType DEFLATE text/html text/css text/javascript application/javascript application/json
</IfModule>

# ── Pages d'erreur ─────────────────────────────────────────────
ErrorDocument 404 /errors/404.php
ErrorDocument 500 /errors/500.php

# ── URLs propres module Social ─────────────────────────────────
<IfModule mod_rewrite.c>
    RewriteEngine On

    # /social/post/[slug]/
    RewriteRule ^social/post/([^/]+)/?$ social/post/index.php?slug=$1 [L,QSA]

    # /social/u/[username]/
    RewriteRule ^social/u/([^/]+)/?$ social/u/index.php?u=$1 [L,QSA]

    # /social/categorie/[slug]/
    RewriteRule ^social/categorie/([^/]+)/?$ social/categorie/index.php?slug=$1 [L,QSA]

    # /social/sitemap.xml
    RewriteRule ^social/sitemap\.xml$ social/sitemap.xml.php [L]
</IfModule>