I'm a beginner building a website and try to understand how to setup the client and server files/folders with my web hosting company. It is a MySQL <-> Node.js/Express API <-> Vue website. I have the Vue files in the public folder and a .htaccess file in the same folder pointing at/giving public access to the node files/API that is stored in a non-public folder. Is this a correct setup? Probably a really stupid question but can I limit access to the API so that only my website can access it?