Options -MultiViews
RewriteEngine On

# Bloqueia acesso web às credenciais
<FilesMatch "^(firebase-service-account\.json|\.env)$">
  Require all denied
</FilesMatch>

# API proxies -> .php
RewriteRule ^api/public/smm-proxy/?$ api/public/smm-proxy.php [L]
RewriteRule ^api/public/velana-proxy/?$ api/public/velana-proxy.php [L]
RewriteRule ^api/public/velana-status/?$ api/public/velana-status.php [L]
RewriteRule ^api/public/expay-proxy/?$ api/public/expay-proxy.php [L]
RewriteRule ^api/public/efi-proxy/?$ api/public/efi-proxy.php [L]

# SPA fallback
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^ index.html [L]
