<IfModule mod_headers.c>
  # Caching verhindern für alle .csv-Dateien
  <FilesMatch "\.csv$">
    Header set Cache-Control "no-cache, no-store, must-revalidate"
    Header set Pragma "no-cache"
    Header set Expires 0

    # CORS erlauben für now.vegenergy.at und finder.vegenergy.at
    SetEnvIf Origin "^https?://(now\.vegenergy\.at|finder\.vegenergy\.at|127\.0\.0\.1:5500|localhost:5500)$" ALLOWED_ORIGIN=$0
    Header always set Access-Control-Allow-Origin "%{ALLOWED_ORIGIN}e" env=ALLOWED_ORIGIN
    Header always set Access-Control-Allow-Methods "GET, OPTIONS"
    Header always set Access-Control-Allow-Headers "Content-Type"
  </FilesMatch>

  # OPTIONS-Anfragen allgemein unterstützen (Preflight)
  <If "%{REQUEST_METHOD} == 'OPTIONS'">
    Header always set Access-Control-Allow-Methods "GET, OPTIONS"
    Header always set Access-Control-Allow-Headers "Content-Type"
    Header always set Access-Control-Max-Age "86400"
  </If>
</IfModule>