Options -Indexes
RewriteEngine On
RewriteCond %{HTTP:Authorization} .
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
<FilesMatch "^(config\.php|\.env|composer\.(json|lock))$">
    Require all denied
</FilesMatch>
RewriteRule ^(?:bin|lib|storage|plugins|backups|upgrade/(?:backups|runtime))(?:/|$) - [F,L]
RewriteRule ^install/schema\.sql$ - [F,L]
RewriteRule \.(?:sql|log|bak|tmp|key|ini|pem)(?:\.|$) - [F,L,NC]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^ index.php [L,QSA]
