Merge branch 'main' into develop

.htaccess

@@ -1,11 +1,19 @@
-<Files .env>
-    Order allow,deny
-    Deny from all
-</Files>
-
-<Directory admin>
-    Order allow,deny
-    allow from 90.63.182.86
-    allow from 217.128.58.80
-    Deny from all
-</Directory>
+# Turn on rewrite engine
+RewriteEngine On
+
+# Block access to the .env file
+RewriteCond %{REQUEST_URI} ^/.env
+RewriteRule ^ - [F]
+
+# Restrict access to the admin directory, allow only two specific IPs
+RewriteCond %{REQUEST_URI} ^/admin
+RewriteCond %{REMOTE_ADDR} !^90\.63\.182\.86$
+RewriteCond %{REMOTE_ADDR} !^217\.128\.58\.80$
+RewriteRule ^ - [F]
+
+# Block access to specific code directories
+RewriteCond %{REQUEST_URI} ^/(app|migration|vendor)/
+RewriteRule ^ - [F]
+
+# Disable directory listings
+Options -Indexes