瀏覽代碼

Fix apache2 security configuration to disable Directory Indexing on /var/www

Emmanuel Bouthenot 5 年之前
父節點
當前提交
5e1cc88097
共有 1 個文件被更改,包括 7 次插入1 次删除
  1. 7 1
      roles/webserver/templates/apache2/conf.d/security.j2

+ 7 - 1
roles/webserver/templates/apache2/conf.d/security.j2

@@ -119,7 +119,13 @@ TraceEnable Off
 # Prevent at least directory listing from everywhere
 #
 <Directory />
-    Options FollowSymLinks
+    Options -Indexes +FollowSymLinks
+    AllowOverride None
+    Require all granted
+</Directory>
+
+<Directory /var/www>
+    Options -Indexes +FollowSymLinks
     AllowOverride None
     Require all granted
 </Directory>