<Files ".env">
  Require all denied
</Files>
