<FilesMatch "\.(php|ini|log|env|sql)$">
    Require all denied
</FilesMatch>

<FilesMatch "^\.(htaccess|htpasswd)$">
    Require all denied
</FilesMatch>