Options -Indexes

<FilesMatch "(^\.|\.sql$|\.log$|composer\.(json|lock)$|package(-lock)?\.json$|README\.md$)">
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Deny from all
</IfModule>
</FilesMatch>

<FilesMatch "\.(php)$">
<IfModule mod_headers.c>
Header set X-Content-Type-Options "nosniff"
Header set X-Frame-Options "SAMEORIGIN"
Header set Referrer-Policy "strict-origin-when-cross-origin"
</IfModule>
</FilesMatch>
