# ===========================================
# Frontend — ${DOMAIN}
# ===========================================

<VirtualHost *:80>
    ServerName ${DOMAIN}
    ServerAdmin webmaster@localhost
    AddDefaultCharset UTF-8

    DocumentRoot ${APP_PATH}/web/

    <Directory ${APP_PATH}/web/>
        Options FollowSymLinks
        AllowOverride none
        Require all granted

        DirectoryIndex index.php index.html

        RewriteEngine On
        RewriteCond %{REQUEST_FILENAME} !-f
        RewriteCond %{REQUEST_FILENAME} !-d
        RewriteRule ^ index.php [L]
    </Directory>

    # ===========================================
    # Security: block dotfiles globally
    # ===========================================
    RewriteEngine On
    RewriteRule (^|/)\. - [F,L]

    # ===========================================
    # Logs
    # ===========================================
    ErrorLog ${APACHE_LOG_DIR}/error.log
    CustomLog ${APACHE_LOG_DIR}/access.log combined
</VirtualHost>