Options -Indexes
<FilesMatch "^(config\.php|README\.md|composer\.(json|lock))$">
  Require all denied
</FilesMatch>
