diff --git a/.htaccess b/.htaccess
new file mode 100644
index 0000000..184a787
--- /dev/null
+++ b/.htaccess
@@ -0,0 +1,12 @@
+<Files *>
+    Require all denied
+</Files>
+
+<FilesMatch "((^$)|(^.+\.(html|php|js|css|png|jpg|svg|webp|gif|ico|pdf|otf|json|txt|xml)$))">
+       Require all granted
+</FilesMatch>
+
+<FilesMatch "\.otf$">
+    Header set Access-Control-Allow-Origin 'https://tobias-radloff.de'
+    Header set Access-Control-Allow-Origin 'https://www.tobias-radloff.de'
+</FilesMatch>