Options -Indexes
RewriteEngine On

<FilesMatch "\.php$">
  Header set X-Content-Type-Options "nosniff"
</FilesMatch>

Header set Service-Worker-Allowed "/"
