DirectoryIndex index.php index.html
<FilesMatch "^(config(?:\.example)?\.php|\.env(?:\..*)?|.*\.log|app\.js|package(?:-lock)?\.json|README\.md)$">
    Require all denied
</FilesMatch>
