# Protect the database and any data files from being downloaded directly.
# Uploaded images (jpg/png/webp/gif) stay reachable.

<IfModule mod_authz_core.c>
  <FilesMatch "\.(sqlite|sqlite-wal|sqlite-shm|db)$">
    Require all denied
  </FilesMatch>
</IfModule>
<IfModule !mod_authz_core.c>
  <FilesMatch "\.(sqlite|sqlite-wal|sqlite-shm|db)$">
    Order allow,deny
    Deny from all
  </FilesMatch>
</IfModule>
