Options -Indexes
DirectoryIndex index.php
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule ^(?:private|includes|\.git)(?:/|$) - [F,L,NC]
RewriteRule ^(?:admin|uploads)(?:/|$) - [L]
RewriteRule ^(?:robots\.txt)$ robots.php [L,QSA]
RewriteRule ^(?:sitemap\.xml)$ sitemap.php [L,QSA]
RewriteRule ^([a-z0-9-]+)\.html$ $1.php [L,QSA,NC]
</IfModule>
<IfModule mod_headers.c>
Header always set X-Content-Type-Options "nosniff"
Header always set Referrer-Policy "strict-origin-when-cross-origin"
Header always set X-Frame-Options "SAMEORIGIN"
</IfModule>
<FilesMatch "^(?:composer\.(?:json|lock)|\.env|\.user\.ini)$">
Require all denied
</FilesMatch>
