<FilesMatch "^(config|config\.local|config\.production|database)\.(php|sql)$">
  Require all denied
</FilesMatch>
