RewriteEngine On
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^ index.php [QSA,L]

<IfModule mod_headers.c>
  Header always set Access-Control-Allow-Headers "Content-Type, Authorization, X-Admin-Key"
  Header always set Access-Control-Allow-Methods "GET, POST, PATCH, PUT, DELETE, OPTIONS"
</IfModule>

<FilesMatch "^(config\.php|schema\.sql|\.env.*|README\.md)$">
  Require all denied
</FilesMatch>
