RewriteEngine On
RewriteBase /PS_Launcher/

# HTTPS forcé
RewriteCond %{HTTPS} off
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]

# Pas de listing de répertoires
Options -Indexes

# /PS_Launcher/api/* → api/index.php (le PATH_INFO est exposé via QUERY_STRING)
RewriteRule ^api/?$    api/index.php [QSA,L]
RewriteRule ^api/(.*)$ api/index.php/$1 [QSA,L]

# Bloquer l'accès direct aux fichiers sensibles
<FilesMatch "\.(sql|md\.bak|log|env)$">
    Require all denied
</FilesMatch>

# Headers de sécurité
<IfModule mod_headers.c>
    Header set X-Content-Type-Options "nosniff"
    Header set X-Frame-Options "DENY"
    Header set Referrer-Policy "no-referrer"
</IfModule>

# Type MIME pour les ZIPs (assure la pris en compte de Range:)
AddType application/zip .zip