DirectoryIndex index.php

<IfModule mod_negotiation.c>
    Options -MultiViews
</IfModule>

<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteBase /

    # Composer-Dateien sperren (liegen außerhalb public/, trotzdem sicher)
    RewriteRule ^(composer\.(json|lock))$ - [F,L]

    # Static files direkt ausliefern
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteRule ^ index.php [L]
</IfModule>