Options -Indexes

# Block .env
<Files ".env">
  Require all denied
</Files>

# Old Apache syntax fallback
# <Files ".env">
#   Order allow,deny
#   Deny from all
# </Files>

# Block logs, json, md
<FilesMatch "\.(log|json|md)$">
  Require all denied
</FilesMatch>

# Rewrite /webhook → public/webhook.php
RewriteEngine On
RewriteCond %{REQUEST_URI} ^/[^/]+/webhook$
RewriteRule ^webhook$ public/webhook.php [L]
