Prevent .env public access
<Files .env> Order Allow,Deny Deny from all </Files>