<IfModule mod_rewrite.c>

    RewriteEngine On

    # Arahkan semua permintaan ke folder public
    # tanpa menampilkan /public pada URL.

    RewriteRule ^public/ - [F,L,NC]

    # Cegah akses langsung ke folder sensitif.
    RewriteRule ^(app|system|writable|vendor|tests)(/|$) - [F,L,NC]

    # Cegah akses ke file konfigurasi sensitif.
    RewriteRule (^|/)\.(env|git|htaccess|htpasswd) - [F,L,NC]

    # Teruskan request ke folder public.
    RewriteRule ^(.*)$ public/$1 [L]

</IfModule>