# Bloquear listagem de diretórios
Options -Indexes

# Bloquear execução de scripts PHP/executáveis
<FilesMatch "\.(php|php3|php4|php5|php7|phtml|shtml|pht|exe|jsp|asp|aspx|cgi|pl|sh|bat|com)$">
    Order allow,deny
    Deny from all
</FilesMatch>

# Permitir acesso aos tipos de arquivo HLS/Streaming
AddType application/vnd.apple.mpegurl .m3u
AddType application/vnd.apple.mpegurl .m3u8
AddType video/MP2T .ts
AddType application/octet-stream .hls
AddType text/plain .txt

# Headers CORS para acesso de aplicativos/players
<IfModule mod_headers.c>
    Header set Access-Control-Allow-Origin "*"
    Header set Access-Control-Allow-Methods "GET, HEAD, OPTIONS, POST, PUT"
    Header set Access-Control-Allow-Headers "Content-Type"
</IfModule>

# Cache control
<IfModule mod_expires.c>
    ExpiresActive On
    ExpiresByType application/vnd.apple.mpegurl "access plus 1 hour"
    ExpiresByType video/MP2T "access plus 1 week"
    ExpiresByType application/octet-stream "access plus 1 week"
    ExpiresByType text/plain "access plus 1 week"
</IfModule>
