# Prefer configuring the hosting document root to /public.
Options -Indexes
<FilesMatch "^(README\.md|\.env|composer\.(json|lock))$">
  Require all denied
</FilesMatch>
