# Serve index.php automatically
DirectoryIndex index.php

# Enable rewrite engine
<IfModule mod_rewrite.c>
    RewriteEngine On
</IfModule>

# Deny access to sensitive files
<FilesMatch "(^\.|log\.txt|.*\.log|.*\.yml|.*\.bak|.*\.config|.*\.dist|.*\.inc|.*\.swp|.*\.xml|.*\.sql|.*\.sh|.*\.xsl|.*\.conf|.*\.ini|.*\.json)$">
    Require all denied
</FilesMatch>

# Deny only license and test directories (allow data/cache)
<IfModule mod_rewrite.c>
    RewriteRule (/)?(license|tests|test)(/.*)?$ - [F,NC]
</IfModule>