Options -Indexes
<FilesMatch "^(config\.php|config\.example\.php|README\.md)$">
  Require all denied
</FilesMatch>
RedirectMatch 403 ^/(includes|database|scripts|storage)/.*$
