# Place in site root (e.g. public_html/.htaccess) if Node/Passenger hijacks PHP routes.

PassengerEnabled off

# Block web access to secrets (Apache 2.4+)
<FilesMatch "^(firebase-service-account\.json|config\.php)$">
    Require all denied
</FilesMatch>

DirectoryIndex index.php privacy.php

<IfModule mod_rewrite.c>
    RewriteEngine Off
</IfModule>