diff --git a/.htaccess b/.htaccess
index 0d873f58f..d17e5c80b 100644
--- a/.htaccess
+++ b/.htaccess
@@ -7,3 +7,7 @@
     RewriteCond %{REQUEST_FILENAME} !-f
     RewriteRule ^ index.php [QSA,L]
 </IfModule>
+
+<FilesMatch "(kanboard|config.php|config.default.php)">
+    Deny from all
+</FilesMatch>