# Security headers for Apache and LiteSpeed. The page also carries its own CSP <meta>.
DirectoryIndex index.html
AddType application/manifest+json .webmanifest
<IfModule mod_headers.c>
  Header always set Referrer-Policy "no-referrer"
  Header always set X-Content-Type-Options "nosniff"
  Header always set X-Frame-Options "SAMEORIGIN"
  Header always set Permissions-Policy "camera=(), microphone=(), geolocation=(), browsing-topics=()"
  <FilesMatch "^(sw\.js|index\.html)$">
    Header set Cache-Control "no-cache"
  </FilesMatch>
</IfModule>
