# Block secret config from HTTP (PHP include still works).
<Files "config.local.php">
    Require all denied
</Files>
<Files "_sb_proxy.inc.php">
    Require all denied
</Files>
<Files "_selfhost_boot.inc.php">
    Require all denied
</Files>
# Deny direct HTTP access to bootstrap cache files
<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteRule ^cache/ - [F,L]
</IfModule>
