Options -Indexes
DirectoryIndex index.php
<FilesMatch "^(config\.local\.php|config\.default\.php|app\.php|cli\.php|install\.sh|README\.md|.*\.sqlite|.*\.db|.*\.log)$">
  Require all denied
</FilesMatch>
<IfModule mod_headers.c>
  Header always set X-Frame-Options "SAMEORIGIN"
  Header always set X-Content-Type-Options "nosniff"
  Header always set Referrer-Policy "same-origin"
</IfModule>
