Options -Indexes
<FilesMatch "^(config|db|ndxhs)\.php$">
    Require all denied
</FilesMatch>