DirectoryIndex index.php

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^api(?:/.*)?$ api.php [QSA,L]
</IfModule>

<IfModule mod_authz_core.c>
<FilesMatch "^(?:\.env|composer\.(?:json|lock)|config\.local\.php|.*\.(?:sql|log|bak))$">
    Require all denied
</FilesMatch>
</IfModule>
