Options -Indexes

# Never serve configuration, database setup, logs, or project notes directly.
<FilesMatch "^(config\.php|schema\.sql|composer\.(json|lock)|README\.md|mail_debug\.log)$">
    Require all denied
</FilesMatch>

RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
