Options -Indexes
<FilesMatch "^(config(\.example)?\.php|bootstrap\.php|onecrypt\.php|retry_vendor\.php|README\.md|\.htaccess)$">
  Require all denied
</FilesMatch>
<FilesMatch "\.(sql|log|env|ini)$">
  Require all denied
</FilesMatch>
Header always set X-Content-Type-Options "nosniff"
Header always set Referrer-Policy "strict-origin-when-cross-origin"
