Options -Indexes
<FilesMatch "\.(sql|bak|dump)$">
  Require all denied
</FilesMatch>
