# .htaccess لـ VPS cPanel مع Passenger
# ضع هذا الملف في ~/public_html/.htaccess

# تفعيل Passenger لـ Node.js
PassengerEnabled On
PassengerAppRoot "/home/USERNAME/rased-erp"
PassengerStartupFile server.js

# IMPORTANT: غيّر USERNAME باسم المستخدم الفعلي
# PassengerNodejs /home/USERNAME/.nvm/versions/node/v20.19.4/bin/node

# السماح بـ Passenger
<IfModule mod_passenger.c>
    PassengerEnabled On
    PassengerAppRoot "/home/USERNAME/rased-erp"
    PassengerStartupFile server.js
    PassengerAppType node
    PassengerRestartOnTouch "/home/USERNAME/rased-erp/tmp/restart.txt"
</IfModule>

# الأمان: منع الوصول لـ .env
<FilesMatch "^\.env">
    Order allow,deny
    Deny from all
</FilesMatch>

# الأمان: منع الوصول لـ node_modules
<FilesMatch "^node_modules">
    Order allow,deny
    Deny from all
</FilesMatch>

# Force HTTPS
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

# Static files
RewriteCond %{REQUEST_FILENAME} -f [OR]
RewriteCond %{REQUEST_FILENAME} -d
RewriteRule ^ - [L]

# إرسال كل شيء لـ Node.js
RewriteRule ^(.*)$ /server.js [L]

# Security headers
<IfModule mod_headers.c>
    Header set X-Content-Type-Options "nosniff"
    Header set X-Frame-Options "SAMEORIGIN"
    Header set Referrer-Policy "strict-origin-when-cross-origin"
</IfModule>