DirectoryIndex index.html

# ---------- SECURITY HEADERS ----------
<IfModule mod_headers.c>
  Header set X-Frame-Options "SAMEORIGIN"
  Header set X-Content-Type-Options "nosniff"
  Header set X-XSS-Protection "1; mode=block"
  Header set Referrer-Policy "strict-origin-when-cross-origin"
  Header set Permissions-Policy "camera=(), microphone=(), geolocation=()"
</IfModule>

# ---------- ROUTING & REWRITES ----------
<IfModule mod_rewrite.c>
  RewriteEngine On
  RewriteBase /forum/
  RewriteRule ^index\.html$ - [L]
  
  # Exclude API folder from React SPA routing
  RewriteCond %{REQUEST_URI} ^/forum/api [NC]
  RewriteRule ^ - [L]

  RewriteCond %{REQUEST_FILENAME} !-f
  RewriteCond %{REQUEST_FILENAME} !-d
  RewriteRule . /forum/index.html [L]
</IfModule>
