# Disable directory browsing
Options -Indexes

# Allow specific file types to be downloaded directly
<FilesMatch "\.(hstgr|sql|sql\.gz|json|log|txt)$">
  Order Allow,Deny
  Allow from all
</FilesMatch>

# Allow access to status file
<Files "export-status.txt">
  Order Allow,Deny
  Allow from all
</Files>

# Deny access to sensitive files
<Files "export-log.txt">
  Order Allow,Deny
  Deny from all
</Files>