Options -Indexes
<IfModule mod_headers.c>
 Header always set X-Content-Type-Options nosniff
 Header always set Referrer-Policy strict-origin-when-cross-origin
</IfModule>
<FilesMatch "^(database\.sql|\.env|composer\.(json|lock)|README.*|CHANGELOG.*)$">
 Require all denied
</FilesMatch>
