<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteBase /rezlyx/

    # PWA: dynamic manifest (DB settings → JSON)
    RewriteRule ^manifest\.json$ manifest.php [L]
    RewriteRule ^admin-manifest\.json$ admin-manifest.php [L]

    # Force admin/ routes through index.php (admin/ directory exists but should be routed)
    RewriteRule ^admin(/.*)?$ index.php [L,QSA]

    # If the request is not for a file or directory, rewrite to index.php
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule ^(.*)$ index.php [L,QSA]
</IfModule>

# Protect sensitive files
<FilesMatch "^\.(?!htaccess)">
    Order allow,deny
    Deny from all
</FilesMatch>

# Protect sensitive directories and files
<IfModule mod_rewrite.c>
    RewriteRule ^\.env$ - [F,L]
    RewriteRule ^composer\.(json|lock)$ - [F,L]
    RewriteRule ^package\.json$ - [F,L]
</IfModule>
