.htaccess

# Uncomment the following to prevent the httpoxy vulnerability
# See: https://httpoxy.org/
#<IfModule mod_headers.c>
#    RequestHeader unset Proxy
#</IfModule>

<IfModule mod_rewrite.c>
    RewriteEngine on

    # ## ------------- Comment out there for local dev  ---##
    # # If we receive a forwarded http request from a proxy...
    # RewriteCond %{HTTP:X-Forwarded-Proto} =http [OR]
    #
    # # ...or just a plain old http request directly from the client
    # RewriteCond %{HTTP:X-Forwarded-Proto} =""
    # RewriteCond %{HTTPS} !=on
    #
    # # Redirect to https version
    # RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
    # ## ------------- END ---------------------------------##

    RewriteRule    ^(\.well-known/.*)$ $1 [L]
    RewriteRule    ^$    webroot/    [L]
    RewriteRule    (.*) webroot/$1    [L]
</IfModule>