# Deny access to all files in config directory
Order Deny,Allow
Deny from all

# Allow only specific files if needed
<FilesMatch "\.(php)$">
    Order Allow,Deny
    Deny from all
</FilesMatch>