# Apache — request ke subfolder (mis. http://localhost/yuni anak si/)
# Entry point aplikasi ada di subfolder public/, sedangkan views memanggil
# asset via asset('assets/...') → dipetakan ke public/assets/...

<IfModule mod_rewrite.c>
    RewriteEngine On

    # Root subfolder → front controller (tanpa ganti URL)
    RewriteRule ^$ public/index.php [QSA,L]

    # Static assets: views memanggil /<subfolder>/assets/...
    # sedangkan file fisik ada di public/assets/...
    RewriteRule ^(assets/.*)$ public/$1 [QSA,L]

    # File asli yang benar-benar ada disajikan langsung
    RewriteCond %{REQUEST_FILENAME} -f
    RewriteRule ^ - [L]

    # Sisanya (route virtual: /login, /admin, ...) → front controller
    RewriteRule ^ public/index.php [QSA,L]
</IfModule>

# Larangan akses langsung ke file sensitif
<FilesMatch "^(\.env|\.env\.example|\.htaccess|.*\.(sql|log|lock))$">
    Require all denied
</FilesMatch>
