✅ All checks passed

✅	Runs through PHP-FPM	`SAPI: fpm-fcgi, PHP 8.4.26`
✅	Runs as the deploy user (own pool)	`User: deployer`
✅	Pool settings applied (100M uploads)	`upload_max_filesize: 100M, post_max_size: 100M`
✅	Composer dependency loaded	`ramsey/uuid → 65d2a1bf-23aa-4bb7-8b49-d7aa4691cbed`
✅	Document root is public/	`DOCUMENT_ROOT: /home/deployer/sites/test-site-php.testwb.nl/releases/20261020133354/public`
✅	Served from a release folder	`Code: /home/deployer/sites/test-site-php.testwb.nl/releases/20261020133354`
✅	.env linked from shared/	`TEST_VALUE=hello`
❔	Static file served by nginx (style.css)	`This row turns green when style.css loads`
🔗	Pretty URLs go to index.php	`/some/pretty/url should show this page too`

Should be blocked

Open each link: it must never show the file itself. A 403, a 404 or this test page are all fine.

Request: /