DirectoryIndex index.php index.html

<IfModule mod_autoindex.c>
    Options -Indexes
</IfModule>

<IfModule mod_authz_core.c>
    <FilesMatch "^(config|telegram_config|telegram_lib|relay_secret\.local|relay_secret\.example)\.php$">
        Require all denied
    </FilesMatch>
    <FilesMatch "\.(sql|md|zip|bak|ini|log)$|^error_log$">
        Require all denied
    </FilesMatch>
</IfModule>

<IfModule !mod_authz_core.c>
    <FilesMatch "^(config|telegram_config|telegram_lib|relay_secret\.local|relay_secret\.example)\.php$">
        Order allow,deny
        Deny from all
    </FilesMatch>
    <FilesMatch "\.(sql|md|zip|bak|ini|log)$|^error_log$">
        Order allow,deny
        Deny from all
    </FilesMatch>
</IfModule>

<IfModule mod_headers.c>
    Header always set X-Content-Type-Options "nosniff"
    Header always set Referrer-Policy "no-referrer"
    Header always set X-Frame-Options "DENY"
</IfModule>
