Options -Indexes

<FilesMatch "(^\.|config\.php$|config\.example\.php$|README\.md$|schema\.sql$)">
    Require all denied
</FilesMatch>

RewriteEngine On
RewriteRule ^(?:lib|data)/ - [F,L]

# Uncomment after SSL is active for the domain.
# RewriteCond %{HTTPS} !=on
# RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

