.htaccess

<FilesMatch appsettings.php>
    Order Allow,Deny
    Deny from all
</FilesMatch>

<IfModule mod_rewrite.c>
    Options -MultiViews

    # Enable the next two lines if your install lives in a subfolder from the domain base directory
    #RewriteEngine On
    #RewriteBase /

    # Comment next line to disable forcing of HTTPS for all pages:
    # (it is strongly recommended you *keep* this setting enabled!)
    #RewriteCond %{HTTPS} off
    #RewriteRule .* https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

    #H/T to anubhava http://stackoverflow.com/a/29874382/324527
    DirectoryIndex bootstrap.php index.html
    Options +FollowSymLinks
    RewriteEngine on

    # redirect all api calls to /api/bootstrap.php
    RewriteRule ^api/((?!bootstrap\.php$).+)$ api/bootstrap.php [L,NC]

    # If the request is a file, folder or symlink that exists, or is for the mail server, serve it up
    RewriteCond %{REQUEST_FILENAME} -f [OR]
    RewriteCond %{REQUEST_FILENAME} -d
    #RewriteCond %{SERVER_PORT} ^1025$
    #RewriteCond %{SERVER_PORT} ^1080$
    RewriteRule ^ - [L]

    # otherwise, serve your index.html app
    RewriteRule ^(.+)$ index.html [L]
    
</IfModule>