Options -Indexes

<FilesMatch "^(config\.php|composer\.(json|lock)|README\.md)$">
    Require all denied
</FilesMatch>

RewriteEngine On
RewriteRule ^storage/ - [F,L]
