Options -Indexes

<FilesMatch "^(bootstrap\.php|config\.php|config\.example\.php)$">
  <IfModule mod_authz_core.c>
    Require all denied
  </IfModule>
</FilesMatch>
