Browse Source

Fix apache2 security configuration to disable Directory Indexing on /var/www

Emmanuel Bouthenot 4 years ago
parent
commit
5e1cc88097
1 changed files with 7 additions and 1 deletions
  1. 7 1
      roles/webserver/templates/apache2/conf.d/security.j2

+ 7 - 1
roles/webserver/templates/apache2/conf.d/security.j2

@@ -119,7 +119,13 @@ TraceEnable Off
 # Prevent at least directory listing from everywhere
 #
 <Directory />
-    Options FollowSymLinks
+    Options -Indexes +FollowSymLinks
+    AllowOverride None
+    Require all granted
+</Directory>
+
+<Directory /var/www>
+    Options -Indexes +FollowSymLinks
     AllowOverride None
     Require all granted
 </Directory>