# Do not serve dotfiles such as .env, .env.example and .gitignore.
# (This does not cover files inside .git; block that in the server config.)
# This needs "AllowOverride AuthConfig" (or All). If the server does not
# allow it, put this block in the virtual host configuration instead.
<FilesMatch "^\.">
  Require all denied
</FilesMatch>