# API folder protection
Options -Indexes

<IfModule mod_headers.c>
    Header always set X-Robots-Tag "noindex, nofollow, noarchive"
</IfModule>

# The API endpoint must remain publicly callable by the application.
# Everything else in this folder is blocked.
<FilesMatch "^(?!discord-event\.php$).*$">
    Require all denied
</FilesMatch>
