# Never serve the config or SQL files over HTTP
<FilesMatch "^(config\.php|.*\.sql)$">
  Require all denied
</FilesMatch>
Options -Indexes
