# FakeShop Apache rules - synthetic disclosure
# Root: /var/www/html/fakeshop/
Options -Indexes +FollowSymLinks
DirectoryIndex index.php index.html

<IfModule mod_rewrite.c>
  RewriteEngine On
  RewriteBase /
  # Preserve existing files and directories
  RewriteCond %{REQUEST_FILENAME} -f [OR]
  RewriteCond %{REQUEST_FILENAME} -d
  RewriteRule ^ - [L]
  # Front controller route
  RewriteRule ^(.+)$ index.php?route=$1 [QSA,L]
</IfModule>

# Protected synthetic paths
RedirectMatch 403 ^/storage/private/
RedirectMatch 403 ^/config/internal/
RedirectMatch 403 ^/backup/archive/

<FilesMatch "\.(env|ini|log|sql|bak)$">
  Require all denied
</FilesMatch>

# PHP compatibility flags
php_flag display_errors Off
php_value memory_limit 256M
php_value upload_max_filesize 16M

# Cache static assets
<IfModule mod_expires.c>
  ExpiresActive On
  ExpiresByType text/css "access plus 7 days"
  ExpiresByType application/javascript "access plus 7 days"
  ExpiresByType image/webp "access plus 30 days"
</IfModule>