Options -Indexes
DirectoryIndex index.php
<IfModule mod_headers.c>
 Header always set X-Content-Type-Options "nosniff"
 Header always set Referrer-Policy "same-origin"
</IfModule>
<FilesMatch "(?i)\.(sql|bak|env|ini|log)$">
 Require all denied
</FilesMatch>

<Files "ruta_privada.php">
 Require all denied
</Files>
