# Deny direct web access to everything outside /public.
# Your Apache VirtualHost DocumentRoot should point at /public directly;
# this file is a defense-in-depth fallback if it does not.
<IfModule mod_authz_core.c>
    Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
    Order deny,allow
    Deny from all
</IfModule>
