# Block all web access — the app core loads only via public/index.php
Require all denied
