Options -Indexes
RewriteEngine On
RewriteRule ^(app|config|database|layouts|storage)/ - [F,L,NC]
<FilesMatch "^(\.env|composer\.(json|lock)|.*\.log)$">
    Require all denied
</FilesMatch>

