Options -Indexes
DirectoryIndex app.php

<FilesMatch "^(config\.php|README\.txt)$">
  Require all denied
</FilesMatch>
