I moved my project to HOST but I can still access .env with address mysite.com/.env and display this file with all variables and secure data. my .env file :
Create .htaccess file in your Root Directory and put following Code.
#Disable index view options -Indexes #hide a Specifuc File order allow,deny Deny from all