RewriteEngine On

RewriteCond %{HTTP_HOST} !^localhost
RewriteCond %{HTTPS} !=on
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

RewriteRule ^core/ - [F]
RewriteRule ^config/ - [F]