Hide the .git and .github folders as well as config.php
@@ -0,0 +1,2 @@
# Prevent access to .git, .github, and config.php
RedirectMatch 404 ^/(\.git|\.github|config\.php)
The note is not visible to the blocked user.