Options -Indexes
<FilesMatch "\.(env|sql|log|bak)$">
  Require all denied
</FilesMatch>
