Block direct access to markdown docs and renovate.json

[AlexanderWagnerDev]

Summary

• Add a FilesMatch rule to .htaccess that denies public access to any *.md file and to renovate.json.
• These files are already excluded from the deploy payload by the SFTP deploy workflow, but this adds a server-side safety net in case any of them ever end up in the web root (e.g. a manual upload, or a future deploy-path change).

Test plan

• Deploy and confirm https://openrtmp.org/README.md and https://openrtmp.org/renovate.json return 403/404 instead of the file contents
• Confirm normal site pages are unaffected

🤖 Generated with Claude Code

https://claude.ai/code/session_01CJGvJZXkV9CUHonq8wzEyt

---

Generated by Claude Code

Summary by CodeRabbit

• Security
  • Restricted direct web access to Markdown documentation files and the Renovate configuration file.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: b29fccf9-82cb-4e3f-ad1c-14fa814d5bc1

📥 Commits

Reviewing files that changed from the base of the PR and between aa26a9d and 5bd974e.

📒 Files selected for processing (1)

• .htaccess

---

📝 Walkthrough

Walkthrough

The .htaccess file adds an Apache FilesMatch rule that denies HTTP access to .md files and renovate.json.

Changes

Repository metadata access restrictions

Layer / File(s)	Summary
Apache file protection .htaccess	Adds a FilesMatch block that returns access denied for Markdown files and renovate.json.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Bug fix

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch claude/peaceful-cannon-88d4ye

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[cursor]

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_3d952c3e-0d3a-4da1-9b2f-a5dae1a08523)