Options -Indexes
DirectoryIndex login.php index.php

<FilesMatch "^(config\.php|bootstrap\.php)$">
    Require all denied
</FilesMatch>
