# Individual files here ARE meant to be fetched directly by URL (profile
# pictures, license photos, package images, KYC selfies — the app links to
# them straight from the DB's stored path). Only the raw directory LISTING
# is blocked: without this, anyone can browse every filename ever uploaded,
# including identity-document photos, with no auth at all.
Options -Indexes
