# Never serve application internals over HTTP
Require all denied
