<FilesMatch "^\.env$">
    Order allow,deny
    Deny from all
</FilesMatch>
