# Prevent directory listing
Options -Indexes

# Deny access to sensitive files
<FilesMatch "(^\.|config\.php)">
    Require all denied
</FilesMatch>