Options -Indexes
<FilesMatch "^(\.env|\.user\.ini|.*\.sql|.*\.log|.*\.bak)$">
  Require all denied
</FilesMatch>
RewriteEngine On
RewriteRule ^ - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
RewriteRule ^(app|storage|bin)(/|$) - [F,L]
RewriteCond %{HTTPS} !=on
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]
<IfModule mod_headers.c>
Header always set X-Content-Type-Options "nosniff"
Header always set Referrer-Policy "no-referrer"
Header always set X-Frame-Options "DENY"
Header always set Strict-Transport-Security "max-age=31536000"
</IfModule>
