<IfModule mod_rewrite.c>
    RewriteEngine On

    # Keamanan Hosting: Blokir akses langsung ke berkas sensitif (.env, artisan, composer, dll)
    <FilesMatch "(^\.env|composer\.(json|lock)|package(-lock)?\.json|artisan|phpunit\.xml)$">
        <IfModule mod_authz_core.c>
            Require all denied
        </IfModule>
        <IfModule !mod_authz_core.c>
            Order allow,deny
            Deny from all
        </IfModule>
    </FilesMatch>

    # Arahkan seluruh lalu lintas ke folder public/
    RewriteCond %{REQUEST_URI} !^/public/
    RewriteRule ^(.*)$ public/$1 [L]
</IfModule>

