.htaccess

<IfModule mod_headers.c>
  <FilesMatch "\.(ttf|ttc|otf|eot|woff|woff2|font.css|css|js)$">
    Header set Access-Control-Allow-Origin "*"
  </FilesMatch>
</IfModule>

<IfModule mod_rewrite.c >
  RewriteEngine on
  RewriteOptions inherit

  RewriteCond %{REQUEST_URI} !^/\.well-known/acme-challenge/.+$
  RewriteCond %{REQUEST_URI} !^/\.well-known/pki-validation/[A-F0-9]{32}\.txt(?:\ Comodo\ DCV)?$

  RewriteRule ^.well-known/acme-challenge - [L]

  # redirect to no-www
  RewriteBase /
  RewriteCond %{HTTP_HOST} ^www\.(.*)$ [NC]
  RewriteRule ^(.*)$ https://%1/$1 [R=301,L]

  # https redirect
  RewriteCond %{HTTPS} !=on
  RewriteRule .* https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]

  # redirect all requests to app's public directory
  RewriteCond %{REQUEST_URI} !public/
  RewriteRule (.*) /public/$1 [L]
</IfModule>