.htaccess.example

# Optional Apache hardening example
#
# Application configuration now lives in `.env`, not in `.htaccess`.
# This file is only for Apache access rules when your host uses `.htaccess`.

Options -Indexes

<IfModule mod_authz_core.c>
    <FilesMatch "^\.">
        Require all denied
    </FilesMatch>

    <FilesMatch "^(?:\.env|\.git|\.gitignore|composer\.(?:json|lock)|package(?:-lock)?\.json|yarn\.lock)$">
        Require all denied
    </FilesMatch>

    <FilesMatch "\.(?:env|log|sql|gz|sqlite|bak|old|dist)$">
        Require all denied
    </FilesMatch>
</IfModule>

<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteRule (^|/)\. - [F,L]
    RewriteRule ^(?:log|tmp)(?:/|$) - [F,L,NC]
    RewriteRule \.(?:env|log|sql|gz|sqlite|bak|old|dist)$ - [F,L,NC]
</IfModule>