Options -Indexes
RewriteEngine On
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^ index.php [L]

# The app is private and data-heavy: never let a CDN or a browser keep a copy.
<IfModule mod_headers.c>
    Header set Cache-Control "no-store" "expr=%{REQUEST_URI} !~ m#^/assets/#"
</IfModule>
