<IfModule mod_rewrite.c>
    <IfModule mod_negotiation.c>
        Options -MultiViews -Indexes
    </IfModule>

    RewriteEngine On

    # KYC and support attachments must never be served as static files. Their
    # only supported delivery path is the authenticated application endpoint.
    RewriteRule ^assets/(?:verify|support)(?:/|$) - [F,L,NC]

    # The application source, dependencies, and runtime data must never be web-accessible.
    RewriteRule ^(?:core|install)(?:/|$) - [F,L,NC]

    # Keep hidden files private, except the ACME challenge directory when enabled by the host.
    RewriteRule (^|/)\.(?!well-known(?:/|$)) - [F,L,NC]

    # Handle Authorization Header
    RewriteCond %{HTTP:Authorization} .
    RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]

    # Redirect Trailing Slashes If Not A Folder...
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteCond %{REQUEST_URI} (.+)/$
    RewriteRule ^ %1 [L,R=301]

    # Send Requests To Front Controller...
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteRule ^ index.php [L]

    <FilesMatch "^\.env">
        Require all denied
    </FilesMatch>
</IfModule>

# php -- BEGIN cPanel-generated handler, do not edit
# Set the “ea-php84” package as the default “PHP” programming language.
<IfModule mime_module>
  AddHandler application/x-httpd-ea-php84___lsphp .php .php8 .phtml
</IfModule>
# php -- END cPanel-generated handler, do not edit
