<IfModule mod_rewrite.c>
    RewriteEngine On

    # Block direct access to hidden/sensitive files
    RewriteRule ^\.env - [F,L]

    # Serve existing files/dirs directly
    RewriteCond %{REQUEST_FILENAME} -f [OR]
    RewriteCond %{REQUEST_FILENAME} -d
    RewriteRule ^ - [L]

    # Route everything else to index.php
    RewriteRule ^ index.php [L]
</IfModule>

Options -Indexes
