# OnDuty Connector, "one folder" layout: save as .htaccess in the folder holding onduty-connector.php.
# The config and the secret are PHP files that already answer 404 when called directly; this is the second lock.
Options -Indexes
<FilesMatch "^(onduty-config|onduty-secret)\.php$|\.(txt|md|log|bak|sql)$">
    Require all denied
</FilesMatch>