# redirect to public page
RewriteCond %{REQUEST_URI} !^public$
RewriteCond %{REQUEST_URI} !^/.well-known/acme-challenge [NC]
RewriteRule "^(.*)$" "[[relativeurl]]/public/" [R=301,L]
# disable directory browsing
# For security reasons, Option all cannot be overridden.
Options +SymLinksIfOwnerMatch -Indexes
Header always set X-Frame-Options "SAMEORIGIN"
<IfModule authz_core_module>
# prevent access to PHP error log
# prevent access to LICENSE
# prevent access to csv, txt and md files
<FilesMatch "\.(csv|txt|md|yml|json|lock)$">
<IfModule !authz_core_module>
# prevent access to PHP error log
# prevent access to LICENSE
# prevent access to csv, txt and md files
<FilesMatch "\.(csv|txt|md|yml|json|lock)$">