Options -Indexes

<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteRule ^(?:app|bin|config|storage|tests)(?:/|$) - [F,L,NC]
    RewriteRule ^(?:\.env|VERSION|SHA256SUMS|README(?:_FA)?\.md|CHANGELOG\.md|LICENSE|cron\.example|nginx\.conf\.example)$ - [F,L,NC]
</IfModule>

<FilesMatch "(^\.|\.(?:log|sql|bak|ini|dist|example)$)">
    <IfModule mod_authz_core.c>
        Require all denied
    </IfModule>
    <IfModule !mod_authz_core.c>
        Deny from all
    </IfModule>
</FilesMatch>
