diff --git a/.htaccess b/.htaccess
index 1b80a6b43d..006074f2ea 100644
--- a/.htaccess
+++ b/.htaccess
@@ -1,7 +1,9 @@
-# To force HTTPS
-RewriteEngine On
-RewriteCond %{HTTPS} off
-RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R,L]
+# Optional: force HTTPS:
+#
+# RewriteEngine On
+# RewriteCond %{HTTPS} off
+# RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R,L]
+#
# To hide directory listing
Options All -Indexes
diff --git a/index.php b/index.php
new file mode 100644
index 0000000000..811130c7c4
--- /dev/null
+++ b/index.php
@@ -0,0 +1,54 @@
+.
+ */
+
+declare(strict_types=1);
+
+echo '
+
+
+
+
+
+ Firefly III
+
+
+
+
+ Danger! This directory should not be open to the public!
+
+
+ /public/ should be the document root of your web server.
+
+
+ Leaving your web server configured like this is a huge security risk.
+
+
+Please read more on the Github help pages.
+
+
+
+';
\ No newline at end of file