Options -Indexes

<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteRule (^|/)(?:database|docs|tools|ss)(?:/|$) - [F,L,NC]
    RewriteRule (^|/)(?:\.env|composer\.(?:json|lock)|phpunit\.xml|.*\.(?:sql|log|ini|bak|dist))$ - [F,L,NC]
</IfModule>

<FilesMatch "(?i)^(?:database\.private\.example\.php|install\.lock)$">
    Require all denied
</FilesMatch>

<IfModule php_module>
    php_flag display_errors Off
    php_flag log_errors On
    php_flag expose_php Off
</IfModule>

<IfModule lsapi_module>
    php_flag display_errors Off
    php_flag log_errors On
    php_flag expose_php Off
</IfModule>
