# Shared-host safe: everything is served from /public, all other dirs are blocked.
RewriteEngine On
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
RewriteRule ^(app|config|database|storage|tests|tools|cron|docs|routes)(/|$) - [F,L]
RewriteRule ^\.env - [F,L]
RewriteCond %{REQUEST_URI} !^/public/
RewriteRule ^(.*)$ public/$1 [L]
