Merging develop into main

templates/vhost.conf.twig

 <VirtualHost *:80>
     DocumentRoot "/var/www/html/{{ webRoot }}/"
-    ServerName default
-    Include conf/preset.conf
-    <Location />
-        Require all granted
-    </Location>
-    SetEnv HTTPS on
-    SetEnvIf X-Forwarded-Proto https HTTPS=on
-    SetEnvIf Request_URI "^/\.healthz$" dontlog
-    RedirectMatch 204 .healthz
-    <IfModule mod_proxy_http.c>
-        SSLProxyEngine on
-    </IfModule>
+  ServerName default
+
+  Include conf/preset.conf
+
+  <Location />
+    Require all granted
+  </Location>
+
+
+  <FilesMatch "^\.(?!well-known)">
+    Order allow,deny
+    Deny from all
+  </FilesMatch>
+
+  <FilesMatch "\.(?:sh|sql|mysql|po|tpl|make|test)$">
+    Order allow,deny
+    Deny from all
+  </FilesMatch>
+
+  <FilesMatch "^wodby\.yml">
+    Order allow,deny
+    Deny from all
+  </FilesMatch>
+
+  <FilesMatch "^Makefile">
+    Order allow,deny
+    Deny from all
+  </FilesMatch>
+
+  <DirectoryMatch "/\.(?!well-known)">
+    Order allow,deny
+    Deny from all
+  </DirectoryMatch>
+
+  SetEnvIf Request_URI "^/\.healthz$" dontlog
+  RedirectMatch 204 .healthz
+
+  SetEnv HTTPS on
+  SetEnvIf X-Forwarded-Proto https HTTPS=on
+  <IfModule mod_proxy_http.c>
+    SSLProxyEngine on
+  </IfModule>
+
 </VirtualHost>