diff --git a/.htaccess b/.htaccess
index dd9abcb22e..0635b2c3f2 100644
--- a/.htaccess
+++ b/.htaccess
@@ -10,8 +10,5 @@ DirectoryIndex index.html
 
     # Restrict access to root folder files
     RedirectMatch 404 /(composer\.(json|lock|phar)|README\.md|\.gitignore|.*\.dist|\.env.*)$
-
-    # Restrict access to shop configs files
-    RedirectMatch 404 ^.*\/(bin|config|build|custom|files|src|var|vendor)\/(?<!public).*$
 </IfModule>
 
diff --git a/bin/.htaccess b/bin/.htaccess
new file mode 100644
index 0000000000..09dfa0c98c
--- /dev/null
+++ b/bin/.htaccess
@@ -0,0 +1,11 @@
+<Files ~ ".*">
+    # Deny all requests from Apache 2.4+.
+    <IfModule mod_authz_core.c>
+          Require all denied
+    </IfModule>
+
+    # Deny all requests from Apache 2.0-2.2.
+    <IfModule !mod_authz_core.c>
+        Deny from all
+    </IfModule>
+</Files>
diff --git a/config/.htaccess b/config/.htaccess
new file mode 100644
index 0000000000..09dfa0c98c
--- /dev/null
+++ b/config/.htaccess
@@ -0,0 +1,11 @@
+<Files ~ ".*">
+    # Deny all requests from Apache 2.4+.
+    <IfModule mod_authz_core.c>
+          Require all denied
+    </IfModule>
+
+    # Deny all requests from Apache 2.0-2.2.
+    <IfModule !mod_authz_core.c>
+        Deny from all
+    </IfModule>
+</Files>
diff --git a/files/.htaccess b/files/.htaccess
new file mode 100644
index 0000000000..09dfa0c98c
--- /dev/null
+++ b/files/.htaccess
@@ -0,0 +1,11 @@
+<Files ~ ".*">
+    # Deny all requests from Apache 2.4+.
+    <IfModule mod_authz_core.c>
+          Require all denied
+    </IfModule>
+
+    # Deny all requests from Apache 2.0-2.2.
+    <IfModule !mod_authz_core.c>
+        Deny from all
+    </IfModule>
+</Files>
diff --git a/src/.htaccess b/src/.htaccess
new file mode 100644
index 0000000000..09dfa0c98c
--- /dev/null
+++ b/src/.htaccess
@@ -0,0 +1,11 @@
+<Files ~ ".*">
+    # Deny all requests from Apache 2.4+.
+    <IfModule mod_authz_core.c>
+          Require all denied
+    </IfModule>
+
+    # Deny all requests from Apache 2.0-2.2.
+    <IfModule !mod_authz_core.c>
+        Deny from all
+    </IfModule>
+</Files>
diff --git a/var/.htaccess b/var/.htaccess
new file mode 100644
index 0000000000..09dfa0c98c
--- /dev/null
+++ b/var/.htaccess
@@ -0,0 +1,11 @@
+<Files ~ ".*">
+    # Deny all requests from Apache 2.4+.
+    <IfModule mod_authz_core.c>
+          Require all denied
+    </IfModule>
+
+    # Deny all requests from Apache 2.0-2.2.
+    <IfModule !mod_authz_core.c>
+        Deny from all
+    </IfModule>
+</Files>
diff --git a/vendor/.htaccess b/vendor/.htaccess
new file mode 100644
index 0000000000..09dfa0c98c
--- /dev/null
+++ b/vendor/.htaccess
@@ -0,0 +1,11 @@
+<Files ~ ".*">
+    # Deny all requests from Apache 2.4+.
+    <IfModule mod_authz_core.c>
+          Require all denied
+    </IfModule>
+
+    # Deny all requests from Apache 2.0-2.2.
+    <IfModule !mod_authz_core.c>
+        Deny from all
+    </IfModule>
+</Files>