<FilesMatch "^(config\.php|composer\.(json|lock))$">
  Require all denied
</FilesMatch>
<DirectoryMatch "(^|/)(\.git|includes|data)(/|$)">
  Require all denied
</DirectoryMatch>
Options -Indexes

# Block search engine indexing at HTTP-header level too
<IfModule mod_headers.c>
  Header set X-Robots-Tag "noindex, nofollow, noarchive, nosnippet"
</IfModule>
