Options -Indexes
<FilesMatch "\.(env|log|sql)$">
  Require all denied
</FilesMatch>
