DirectoryIndex index.php index.html

# Prevent directory listing if index.php is unavailable.
Options -Indexes

# Never expose Composer or project metadata over HTTP.
<FilesMatch "^(composer\.(json|lock|phar)|\.gitignore)$">
    Require all denied
</FilesMatch>