Require all denied

# panel.php is the one admin file meant to be opened in a browser — it has
# its own ADMIN_SECRET login check built in. Everything else in this folder
# (create_account.php, list_accounts.php, etc.) stays blocked from the web;
# those are meant to be run from SSH/Terminal only.
<Files "panel.php">
    Require all granted
</Files>

