Options -Indexes
DirectoryIndex index.php
<FilesMatch "^(config(?:\.local)?\.php(?:\.example)?|.*\.sqlite|README\.md)$">
  Require all denied
</FilesMatch>

# Keep the panel protocol-neutral. The same files work over HTTP or HTTPS.
RewriteEngine On
RewriteRule ^sdb/[0-9]+/([A-Za-z0-9_]+\.php)$ sdb.php?endpoint=$1 [QSA,L]
