# Block direct access to environment/build metadata files.
<FilesMatch "^(\.env(\..*)?|composer\.(json|lock)|phpunit\.xml|artisan|\.gitignore|\.gitattributes)$">
    Require all denied
</FilesMatch>