keep only static resources visible under /public (no html templates)