Options -Indexes

<IfModule mod_authz_core.c>
    <FilesMatch "^(config\.php|README\.md|CHANGELOG\.md)$">
        Require all denied
    </FilesMatch>
</IfModule>

<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteRule ^(?:app|database|tests)(?:/|$) - [F,L]
</IfModule>

<IfModule mod_headers.c>
    Header always set X-Content-Type-Options "nosniff"
    Header always set X-Frame-Options "DENY"
    Header always set Referrer-Policy "same-origin"
</IfModule>

<FilesMatch "\.(sql|log|ini)$">
    Require all denied
</FilesMatch>
