Options -Indexes
DirectoryIndex index.php

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule ^(?:config|storage|logs|database|tests|vendor)/ - [F,L,NC]
RewriteRule (^|/)\.env(?:\.|$) - [F,L,NC]
RewriteRule \.(?:sql|log|ini|env|bak|dist|md)$ - [F,L,NC]
</IfModule>

<FilesMatch "^(?:\.env|composer\.(?:json|lock)|phpunit\.xml|README.*)$">
  Require all denied
</FilesMatch>

<IfModule mod_headers.c>
Header always set X-Content-Type-Options "nosniff"
Header always set X-Frame-Options "SAMEORIGIN"
Header always set Referrer-Policy "strict-origin-when-cross-origin"
Header always set Permissions-Policy "camera=(), microphone=(), geolocation=(self)"
</IfModule>
