Options -Indexes

<IfModule mod_rewrite.c>
    RewriteEngine On

    RewriteRule ^(app|cli|config|macclient|storage)(/|$) - [F,L]
    RewriteRule ^bl-content/(databases|pages|tmp)(/|$) - [F,L]

    RewriteCond %{REQUEST_FILENAME} -f [OR]
    RewriteCond %{REQUEST_FILENAME} -d
    RewriteRule ^ - [L]

    RewriteRule ^(.+)$ index.php?route=$1 [QSA,L]
    RewriteRule ^$ index.php [L]
</IfModule>

<FilesMatch "\.(sqlite|db|csv|json|lock)$">
    Require all denied
</FilesMatch>

<FilesMatch "^\.env(?:\..*)?$">
    Require all denied
</FilesMatch>