# -------------------------------------------------
# Apache Front Controller Setup (public/.htaccess)
# -------------------------------------------------

RewriteEngine On

# Sicherheit: keine Directory Listings
Options -Indexes

# -------------------------------------------------
# 1) Assets DIREKT ausliefern
# -------------------------------------------------
RewriteRule ^assets/ - [L]

# -------------------------------------------------
# 2) Legacy-Pfad blockieren (frueher public/page)
# -------------------------------------------------
RewriteRule ^page/ - [F,L]

# -------------------------------------------------
# 3) Alles andere an den Front Controller
# -------------------------------------------------
RewriteRule ^ index.php [L]

# -------------------------------------------------
# 4) (Optional) Zusätzliche Sicherheits-Header
# -------------------------------------------------
<IfModule mod_headers.c>
    Header set X-Frame-Options "SAMEORIGIN"
    Header set X-Content-Type-Options "nosniff"
    Header set Referrer-Policy "strict-origin-when-cross-origin"
</IfModule>