# Deny direct access to posts.json (public pages read it via PHP, not directly)
<Files "posts.json">
  Require all denied
</Files>
Options -Indexes
