diff --git a/.htaccess b/.htaccess
index 891814e..7d98c7e 100644
--- a/.htaccess
+++ b/.htaccess
@@ -2,8 +2,9 @@
 # The .git folder lives inside public_html (docRoot) and was found to be
 # directly downloadable over HTTPS (e.g. https://orbis.orbishosting.com/.git/config),
 # which leaked a live GitHub personal access token embedded in the remote URL.
-RedirectMatch 404 /\.git
-
-<FilesMatch "^\.">
-  Require all denied
-</FilesMatch>
+# Note: standard Apache access-control directives (RedirectMatch, FilesMatch/
+# Require all denied, Order/Deny) are silently ignored on this LiteSpeed vhost.
+# Only mod_rewrite rules are honored (confirmed via testing), hence this form.
+RewriteEngine On
+RewriteCond %{REQUEST_URI} ^/\.git
+RewriteRule .* - [F,L]