# Denegar lectura HTTP de secretos en el document root.
<IfModule mod_authz_core.c>
    <FilesMatch "^\.env">
        Require all denied
    </FilesMatch>
    <FilesMatch "\.(sql|log)$">
        Require all denied
    </FilesMatch>
</IfModule>
<IfModule !mod_authz_core.c>
    <FilesMatch "^\.env">
        Deny from all
    </FilesMatch>
    <FilesMatch "\.(sql|log)$">
        Deny from all
    </FilesMatch>
</IfModule>
<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteRule ^(config|vendor|src|database|includes)/ - [F]
</IfModule>
