<Files ~ "^.*">
Deny from all
</Files>
<Files ~ ^.*(html|css|js|png|jpg|jpeg|gif|woff|woff2|ttf)$>
Allow from all
</Files>
sites/.htaccess
<Files ~ "^(?!.*\.(html|css|js|png|jpe?g|gif|woff2?|ttf)$)">
Deny from all
</Files>
sites/site1/admin/.htaccess
<Files ~ "^.*">
Allow from all
</Files>