# Probance API — encryption keys.
#
# This directory holds the AES keys protecting the SFTP credentials and the module token.
# Nothing in here may ever be served over HTTP.
#
# This file is a SECOND layer only: it is Apache-specific and silently ignored by nginx,
# which is precisely where the issue was found. The primary protection is that key files
# are PHP files guarded by "<?php exit; ?>" (probance-shop-<id>.php), which works on any
# server that runs PHP for this directory.

<IfModule mod_authz_core.c>
    # Apache 2.4 and later
    Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
    # Apache 2.2 and earlier
    Order deny,allow
    Deny from all
</IfModule>
