.htaccess

DirectoryIndex index.php

<IfModule mod_rewrite.c>
    RewriteEngine On

    # redirect to HTTPS
    #RewriteCond %{HTTPS} off
    #RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

    # determine RewriteBase and set it into env
    RewriteCond %{REQUEST_URI}::$0 ^(/.+)/(.*)::\2$
    RewriteRule .* - [E=BASE:%1]

    # direct requests to index.php unless it's a file or a dir
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule ^ %{ENV:BASE}/index.php [L]
</IfModule>

# deny access to composer and hidden files
<FilesMatch "^composer\.(json|lock)$|^\.">
    <IfModule mod_authz_core.c>
        Require all denied
    </IfModule>
    <IfModule !mod_authz_core.c>
        Order deny,allow
        Deny from all
    </IfModule>
</FilesMatch>