DirectoryIndex disabled
Options -Indexes

RewriteEngine On

# 🔒 Block sensitive files and folders
RewriteRule (^|/)\.env$ - [F,L]
RewriteRule (^|/)(db\.js|app\.js|serverapp\.js)$ - [F,L]
RewriteRule (^|/)(controller|config|globalMiddleware|views|routes|models|public)/ - [F,L]
# RewriteRule ^validations/(?!.*\.js$) - [F,L]
# ✅ Allow static frontend assets served from root (if any)
RewriteCond %{REQUEST_URI} \.(css|js|mjs|png|jpg|jpeg|gif|svg|ico|woff|woff2|ttf|eot|mp4|webm)$ [NC]
RewriteCond %{REQUEST_FILENAME} -f
RewriteRule ^ - [L]

# ✅ Proxy root route to Node.js
RewriteCond %{REQUEST_URI} ^/$
RewriteRule ^$ http://127.0.0.1:3031/ [P,L]

# 🚀 Proxy everything else to Node.js
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*)$ http://127.0.0.1:3031%{REQUEST_URI} [P,L]

# 🔐 Block suspicious /index.{ext}
RewriteCond %{REQUEST_URI} ^/index\.[a-z0-9]{2,5}$ [NC]
RewriteRule ^ - [F,L]

# 🛑 Skip error documents
RewriteCond %{REQUEST_URI} ^/(403|404)\.shtml$ [NC]
RewriteRule ^ - [L]
