Options -Indexes
<Files "config.php">
  Require all denied
</Files>
<FilesMatch "^(README.*|composer\.(json|lock)|package(-lock)?\.json|\.env)$">
  Require all denied
</FilesMatch>
