# Protect sensitive files if this folder is web-accessible
<FilesMatch "^\.env|package(-lock)?\.json$">
  Require all denied
</FilesMatch>

<IfModule mod_rewrite.c>
  RewriteEngine On
  RewriteRule ^(src|scripts|node_modules)(/|$) - [F,L]
</IfModule>
