# Sadiq Steel HR – put this file in the project ROOT folder
# Only needed when the subdomain's document root points to the project folder
# instead of the  public/  folder. It sends every request into  public/.
<IfModule mod_rewrite.c>
    RewriteEngine On

    # Force HTTPS (remove these 2 lines until SSL is installed)
    RewriteCond %{HTTPS} !=on
    RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

    RewriteCond %{REQUEST_URI} !^/public/
    RewriteRule ^(.*)$ public/$1 [L]
</IfModule>

# Never serve .env, composer files, artisan, logs or source folders directly
<FilesMatch "^(\.env.*|\.git.*|composer\.(json|lock)|package(-lock)?\.json|artisan|.*\.sql|.*\.log)$">
    Require all denied
</FilesMatch>
Options -Indexes