<FilesMatch "\.(env|sql|bak|config|ini)$">
  Require all denied
</FilesMatch>
