# .htaccess: the settings folder of the application is never served over HTTP (nothing in it is meant for a visitor).
# @comments-complete 2026-11-05

# Fails closed: without mod_authz_core (Apache 2.4) the server answers 500 instead of serving the files.
Require all denied
