Options -Indexes
<FilesMatch "^(config|config\.example|db|auth|lib|layout)\.php$">
    # These are only include()d, never opened directly
    Require all denied
</FilesMatch>
<FilesMatch "(\.(sql|md|ini|ya?ml|sh|json)$|^\.ftp-deploy-sync-state\.json$)">
    # Schema, docs, deploy state: not for browsers
    Require all denied
</FilesMatch>
