# let's force HTTPS
RewriteEngine On 
RewriteCond %{HTTPS} off 
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

# let's disallow txt files
<FilesMatch "(?i)\.txt$">
AuthType Basic
AuthName "My text files are protected!"
AuthUserFile /home/username/.htpasswd
Require valid-user
</FilesMatch>