Options -Indexes

# Never expose server bootstrap/configuration files over HTTP.
<FilesMatch "^(\.env|\.env\..*|composer\.(json|lock)|bootstrap\.php|README\.md|PACKAGES\.txt|ENV\.txt|MIGRATIONS\.txt|DELETE_FILES\.txt)$">
    Require all denied
</FilesMatch>
