Options -Indexes

<FilesMatch "^(?:\.env(?:\..*)?|.*\.(?:sql|log|ini|conf|sh|bak|old|orig)|runtime-config\.php|\.install-complete)$">
    Require all denied
</FilesMatch>

<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteRule ^(?:includes|database)(?:/|$) - [F,L]
</IfModule>