Options -Indexes
DirectoryIndex index.php index.html

<FilesMatch "^config(?:\.[a-z0-9_-]+)?\.php$">
  Require all denied
</FilesMatch>

<IfModule mod_headers.c>
  Header always set X-Content-Type-Options "nosniff"
  Header always set Referrer-Policy "same-origin"
  Header always set X-Frame-Options "SAMEORIGIN"
  <FilesMatch "^(index\.php|index\.html)$">
    Header always set Cache-Control "no-store, no-cache, must-revalidate, max-age=0"
    Header always set Pragma "no-cache"
    Header always set Expires "0"
    Header always set X-FarmDashboard-Design "3.4.11-business"
  </FilesMatch>
</IfModule>

<IfModule mod_expires.c>
  ExpiresActive On
  <FilesMatch "^(index\.php|index\.html)$">
    ExpiresDefault "access plus 0 seconds"
  </FilesMatch>
</IfModule>
