Options -Indexes

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule ^(?:includes|database|storage)/ - [F,L,NC]
</IfModule>

<FilesMatch "(^\.|config\.php|config\.example\.php|schema\.sql|README.*|composer\.(json|lock))$">
  Require all denied
</FilesMatch>

<IfModule mod_headers.c>
  Header always set X-Content-Type-Options "nosniff"
  Header always set X-Frame-Options "SAMEORIGIN"
  Header always set Referrer-Policy "same-origin"
  Header always set Permissions-Policy "camera=(), microphone=(), geolocation=()"
</IfModule>

<IfModule mod_deflate.c>
  AddOutputFilterByType DEFLATE text/html text/plain text/css application/javascript application/json
</IfModule>

<FilesMatch "\.(sqlite|sqlite3|db|wal|shm)$">
Require all denied
</FilesMatch>

<FilesMatch "\.(zip|rar|7z|tar|gz|sql|bak|backup|log|env|ini|swp|old)$">
Require all denied
</FilesMatch>
