diff --git a/pkg/serverconfigs/firewallconfigs/http_firewall_template.go b/pkg/serverconfigs/firewallconfigs/http_firewall_template.go
index 33173b4..0eadc65 100644
--- a/pkg/serverconfigs/firewallconfigs/http_firewall_template.go
+++ b/pkg/serverconfigs/firewallconfigs/http_firewall_template.go
@@ -252,7 +252,7 @@ func HTTPFirewallTemplate() *HTTPFirewallPolicy {
 				IsOn:              true,
 				Param:             "${requestPath}",
 				Operator:          HTTPFirewallRuleOperatorMatch,
-				Value:             `/\.(git|svn|htaccess|idea)\b`, // TODO more keywords here
+				Value:             `/\.(git|svn|htaccess|idea|env)\b`, // TODO more keywords here
 				IsCaseInsensitive: true,
 			})
 			group.AddRuleSet(set)