Options -Indexes
ServerSignature Off
<FilesMatch "^(schema\.sql|README.*\.txt|composer\.(json|lock)|\.env)$">
  Require all denied
</FilesMatch>
<Files "database.php">
  Require all denied
</Files>
<IfModule mod_headers.c>
 Header always set X-Content-Type-Options "nosniff"
 Header always set X-Frame-Options "SAMEORIGIN"
 Header always set Referrer-Policy "strict-origin-when-cross-origin"
 Header always set Permissions-Policy "camera=(), microphone=(), geolocation=()"
</IfModule>

<FilesMatch "^(install-schema\.sql|schema\.sql|README.*|\.installed)$">
 Require all denied
</FilesMatch>
