diff --git a/.htaccess b/.htaccess
new file mode 100644
index 0000000000..1b80a6b43d
--- /dev/null
+++ b/.htaccess
@@ -0,0 +1,12 @@
+# To force HTTPS
+RewriteEngine On
+RewriteCond %{HTTPS} off
+RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R,L]
+
+# To hide directory listing
+Options All -Indexes
+
+# To prevent access to .env and other files
+<Files .*>
+    Deny from all
+</Files>