# Protect data + config from direct web access
<FilesMatch "\.(json)$">
  Require all denied
</FilesMatch>
<Files "license-config.php">
  Require all denied
</Files>