horok/apache2
1
0
Fork 0
Code Activity

Adding configuration file to no accidentally serve git files.

Browse source 
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
This commit is contained in:
Daniel Baumann 2025-06-26 07:47:15 +02:00
parent e1aed5ea54
commit bbc4d7a552
Signed by: daniel.baumann
GPG key ID: BCC918A2ABD66424
2 changed files with 6 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
debian/apache2.postinst vendored
View file

@ -56,7 +56,7 @@ enable_default_conf()
if is_fresh_install $@ ; then
for conf in charset localized-error-pages other-vhosts-access-log \
security serve-cgi-bin \
csp hsts modern-cookies modern-ssl no-cache no-frames ; do
csp hsts modern-cookies modern-ssl no-cache no-frames no-git ; do
a2enconf -m -q $conf
done
fi

5
debian/config-dir/conf-available/no-git.conf vendored Normal file
View file

@ -0,0 +1,5 @@
# /etc/apache2/conf-available/no-git.conf
<DirectoryMatch "^/.*/\.git*">
Require all denied
</DirectoryMatch>