RewriteEngine On

RewriteBase /resadmin/neodesk/


# Block internal folders

RewriteRule ^(app|config|includes|routes)/ - [F,L,NC]


# Allow real files and directories

RewriteCond %{REQUEST_FILENAME} -f [OR]
RewriteCond %{REQUEST_FILENAME} -d
RewriteRule ^ - [L]


# Send application routes to index.php

RewriteRule ^(.+)$ index.php?route=$1 [QSA,L]

<FilesMatch "^\.env">
    Require all denied
</FilesMatch>

<FilesMatch "^(gcp-service-account\.json)$">
    Require all denied
</FilesMatch>