Add .env to blocked files in web server configs