.htaccess

# Refactor url config 
RewriteEngine on
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*)$ server.php?path=$1 [NC,L,QSA]

# Executable file to run app
DirectoryIndex server.php

# Hide root web-server folders
Options All -Indexes

# Protect specific files
<FilesMatch "\.(log|htaccess|env|env.example|gitignore|json)$">
    Order allow,deny
    Deny from all
</FilesMatch>

<Files "cli">
    Order allow,deny
    Deny from all
</Files>

<Files "init">
    Order allow,deny
    Deny from all
</Files>

<Files "gulpfile.mjs">
    Order allow,deny
    Deny from all
</Files>

<Files "composer.json">
    Order allow,deny
    Deny from all
</Files>

<Files "package.json">
    Order allow,deny
    Deny from all
</Files>

<Files "README.md">
    Order allow,deny
    Deny from all
</Files>