Options -Indexes
<FilesMatch "\.(sql|log|bak|old)$">
  Require all denied
</FilesMatch>
