Options -Indexes
<FilesMatch "(config\.php|\.lock)">
  Require all denied
</FilesMatch>