# Bifas Digital Affiliate
DirectoryIndex index.php

<IfModule mod_rewrite.c>
  RewriteEngine On
  # Blokir file & folder internal
  RewriteRule ^(app|storage)(/|$) - [F,L]
  RewriteRule ^(config\.php|config\.sample\.php|README.*\.md|.*\.sql|.*\.zip|.*\.log)$ - [F,L,NC]
  RewriteRule (^|/)\.(?!well-known) - [F,L]
  # Semua request non-file ke index.php
  RewriteCond %{REQUEST_FILENAME} !-f
  RewriteCond %{REQUEST_FILENAME} !-d
  RewriteRule ^ index.php [L,QSA]
</IfModule>

<FilesMatch "\.(sql|zip|log|md|env|ini)$">
  <IfModule mod_authz_core.c>
    Require all denied
  </IfModule>
  <IfModule !mod_authz_core.c>
    Order allow,deny
    Deny from all
  </IfModule>
</FilesMatch>

<IfModule mod_expires.c>
  ExpiresActive On
  ExpiresByType text/css "access plus 30 days"
  ExpiresByType application/javascript "access plus 30 days"
  ExpiresByType image/png "access plus 30 days"
  ExpiresByType image/jpeg "access plus 30 days"
  ExpiresByType image/webp "access plus 30 days"
</IfModule>
