https://portal.nextcloud.com/.htaccess file is readable

Summary

@mksahilisr reported a disclosure of the .htaccess file on https://portal.nextcloud.com. This has been resolved by adding the following to the Apache server configuration:

<Files .htaccess>
  order allow,deny
  deny from all
</Files>

Since the .htaccess file contained some potential sensitive data this report has only been disclosed limitedly.