# Add these lines to the domain document root .htaccess.
# Keep the Passenger/CloudLinux section generated by cPanel unchanged.
# Do not replace the whole existing .htaccess with this file.
Options -Indexes -MultiViews
DirectoryIndex index.html

# App code, configuration and ZIP archives belong outside the document root.
<FilesMatch "(?i)(^\.|\.(zip|sql|env|log|cjs|tsx?|md)$|^(app|core|database-health|public-view|vite\.config)\.js$|^package(-lock)?\.json$)">
  Require all denied
</FilesMatch>
