# Protect sensitive files
<FilesMatch "\.(sql|md|log|env)$">
    Order allow,deny
    Deny from all
</FilesMatch>

# Deny config directory via rewrite
RewriteEngine On
RewriteRule ^config/ - [F,L]

# Default charset
AddDefaultCharset UTF-8
