# API endpoints - allow POST, block directory listing
Options -Indexes
<IfModule mod_rewrite.c>
RewriteEngine On
# Allow API access
</IfModule>
# Security headers
<IfModule mod_headers.c>
Header set X-Content-Type-Options "nosniff"
</IfModule>
