From 5f47daaeca1712ae5768c8b321e3116f5e262a15 Mon Sep 17 00:00:00 2001
From: Ludwig Richter <riluzm@posteo.de>
Date: Sun, 6 Mar 2022 01:55:57 +0100
Subject: [PATCH] fix: Fix `.htaccess` configuration

---
 .htaccess | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/.htaccess b/.htaccess
index c555666..7d1d16e 100644
--- a/.htaccess
+++ b/.htaccess
@@ -1,5 +1,12 @@
+Options -Indexes
+
 Order allow,deny
 Deny from all
-<FilesMatch ^(index\.php)?$>
-  Allow from all
-</FilesMatch>
\ No newline at end of file
+
+<FilesMatch "^(browserconfig\.xml|site\.webmanifest|.+\.(css|svg|png|ico)|(index\.php)?|)$">
+    allow from 127.0.0.1
+    # Only allow from local IPs:
+    allow from 10.0.0.0/255.0.0.0
+    allow from 172.16.0.0/255.240.0.0
+    allow from 192.168.0.0/255.255.0.0
+</FilesMatch>