# Defesa extra: o banco nunca sai pelo Apache
<FilesMatch "\.(db|sqlite|sqlite3|db-wal|db-shm)$">
    Require all denied
</FilesMatch>
