RewriteEngine On

RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^ index.php [QSA,L]

Options -Indexes

<FilesMatch "^(\.env|composer\.(json|lock))$">
    Require all denied
</FilesMatch>