# POS STORE Apache configuration
Options -Indexes
DirectoryIndex index.php login.php

<IfModule mod_rewrite.c>
    RewriteEngine On

    # Keep application internals and generated logs out of direct HTTP access.
    RewriteRule ^(?:config|database|logs|includes|views)(?:/|$) - [F,L,NC]

    # Block dotfiles, while allowing the standard ACME challenge directory.
    RewriteRule ^\.(?!well-known(?:/|$)) - [F,L]
</IfModule>

# Do not serve source, database exports, archives, or development artifacts.
<IfModule mod_authz_core.c>
    <FilesMatch "(?i)\.(?:sql|patch|zip|md|log|ini|env|bak|old|orig|dist)$">
        Require all denied
    </FilesMatch>
</IfModule>

<IfModule !mod_authz_core.c>
    <FilesMatch "(?i)\.(?:sql|patch|zip|md|log|ini|env|bak|old|orig|dist)$">
        Order allow,deny
        Deny from all
    </FilesMatch>
</IfModule>
