# Rapid Reward Cash — root rules (document root of rapidrewordcash.unityassetsstore.com)

Options -Indexes

# Block the local credentials file and logs from the web
<FilesMatch "^(database\.local\.php|.*\.log)$">
    Require all denied
</FilesMatch>

# Deny access to config, middleware, models, services, utils, uploads internals
RewriteEngine On
RewriteRule ^(config|middleware|models|services|utils)/ - [F,L]

# Never serve the local credentials file
RewriteRule ^config/database\.local\.php$ - [F,L]

# Force HTTPS
<IfModule mod_rewrite.c>
    RewriteCond %{HTTPS} off
    RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [R=301,L]
</IfModule>

# Never serve the .git directory or dotfiles
RedirectMatch 404 /\.git
