Options -Indexes
DirectoryIndex index.php

# Force HTTPS
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

# Never serve dotfiles or SQL/config leftovers
<FilesMatch "^\.|\.(sql|md|log|sample\.php)$">
  Require all denied
</FilesMatch>
