# Disable directory listing
Options -Indexes

<IfModule mod_rewrite.c>
    RewriteEngine On

    # Block access to sensitive files and directories
    RewriteRule ^(\.env|\.git|composer\.(json|lock)|spark|phpunit\.xml\.dist) - [F,L]
    RewriteRule ^(app|system|writable|tests)/ - [F,L]

    # Don't rewrite if already in public folder
    RewriteCond %{REQUEST_URI} !^/klinik/public/
    RewriteRule ^(.*)$ public/$1 [L]
</IfModule>
