Options -Indexes
<FilesMatch "^(\.env|composer\.(json|lock)|.*\.sql)$">
  Require all denied
</FilesMatch>
