DirectoryIndex index.php
Options -Indexes
<FilesMatch "\.(env|log|sql|bak|ini|sh)$">
    Require all denied
</FilesMatch>
