temmie/userweb: deny a bunch of spooky directories by default

It should still be possible for the user to re-enable these with `.htaccess`
2026-05-10 03:33:38 +09:00
parent e9a267e2a3
commit b009da31af
1 changed files with 19 additions and 0 deletions
@@ -226,6 +226,25 @@ in
          AllowOverride All
          Require all granted
        </Directory>
+
+        <DirectoryMatch "^/home/pvv/.*/web-docs/(${lib.concatStringsSep "|" [
+          "\\.git"
+          "\\.hg"
+          "\\.svn"
+          "\\.ssh"
+          "\\.env"
+          "\\.envrc"
+          "\\.bzr"
+          "\\.venv"
+          "CVS"
+          "RCS"
+          ".*\\.swp"
+          ".*\\.bak"
+          ".*~"
+        ]})(/|$)">
+            AllowOverride All
+            Require all denied
+        </DirectoryMatch>
      '';
    };
  };