# ─────────────────────────────────────────────────────────────
#  SwissPass API — Root .htaccess
#  Purpose: Block sensitive paths, forward everything to /public/
# ─────────────────────────────────────────────────────────────
RewriteEngine On

# ── 1. Block access to sensitive files and directories ────────
RewriteRule ^(src|config|storage|vendor|\.env|\.env\.example|composer\.|\.git|\.gitignore) - [F,L]

# ── 2. Skip rewrite if the request is already inside /public/ ─
#  (Prevents the /public/x → /public/public/x double-rewrite
#   that caused 500 on every direct /public/ access)
RewriteCond %{REQUEST_URI} ^/[^/]*/public/ [NC]
RewriteRule ^ - [L]

# ── 3. Forward everything else to the front controller ────────
RewriteRule ^(.*)$ public/$1 [L]
