RewriteEngine On

Options -Indexes

RewriteCond %{REQUEST_URI} !^/\.well-known/ [NC]
RewriteRule (^|/)\. - [F,L]
RewriteRule ^(app|bootstrap|config|database|DB|resources|routes|tests|vendor|node_modules)(/|$) - [F,L,NC]
RewriteRule ^storage/(app|framework|logs)(/|$) - [F,L,NC]
RewriteRule ^(artisan|composer\.(json|lock)|package(-lock)?\.json|phpunit\.xml|README\.md|AGENTS\.md|CLAUDE\.md|boost\.json|pint\.json|_ide_helper\.php|\.mcp\.json)$ - [F,L,NC]

RewriteCond %{REQUEST_URI} !^/public/
RewriteCond %{REQUEST_FILENAME} !-f
RewriteRule ^(.*)$ public/$1 [L,QSA]
