# DO NOT REMOVE. CLOUDLINUX PASSENGER CONFIGURATION BEGIN
PassengerAppRoot "/home/biqo6002/app.iteractivehub.com/note-osint"
PassengerBaseURI "/note-osint"
PassengerNodejs "/home/biqo6002/nodevenv/app.iteractivehub.com/note-osint/18/bin/node"
PassengerAppType node
PassengerStartupFile app.js
# DO NOT REMOVE. CLOUDLINUX PASSENGER CONFIGURATION END
# DO NOT REMOVE OR MODIFY. CLOUDLINUX ENV VARS CONFIGURATION BEGIN
<IfModule Litespeed>
SetEnv ANTHROPIC_API_KEY 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
SetEnv BASE_PATH /note-osint
SetEnv APP_PASS Redacnotesecu@2002
SetEnv APP_USER cassian
</IfModule>
# DO NOT REMOVE OR MODIFY. CLOUDLINUX ENV VARS CONFIGURATION END

# ─── Sécurité (ajouts — ne pas toucher aux blocs ci-dessus) ─────────

# Pas de listing de répertoire
Options -Indexes

# Redirection vers HTTPS
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

# Ne jamais servir les fichiers serveur en accès direct
<FilesMatch "^(app\.js|docx-export\.js|package\.json|package-lock\.json)$">
  Require all denied
</FilesMatch>

RedirectMatch 404 /node_modules(/|$)
RedirectMatch 404 /tmp(/|$)
RedirectMatch 404 /\.claude(/|$)
