# If Apache serves this directory directly, deny access to application source/config.
<FilesMatch "^(app\.js|package\.json|\.env|README\.txt)$">
  Require all denied
</FilesMatch>
