<FilesMatch "^(config|config\.local|db)\.php$|\.sql$">
  Require all denied
</FilesMatch>
