secure access to vcs files

[packages/apache.git] / apache-common.conf

# DocumentRoot: The directory out of which you will serve your
# documents. By default, all requests are taken from this directory, but
# symbolic links and aliases may be used to point to other locations.
#
DocumentRoot "/home/services/httpd/html"

# Each directory to which Apache has access can be configured with respect
# to which services and features are allowed and/or disabled in that
# directory (and its subdirectories).
#
# First, we configure the "default" to be a very restrictive set of
# features.
#
<Directory />
	Options FollowSymLinks
	AllowOverride None
	<IfModule mod_authz_host.c>
		Require all denied
	</IfModule>
	<IfModule mod_access_compat.c>
		Order deny,allow
		Deny from all
	</IfModule>
</Directory>

# Prevent access to:
# - .htaccess and .htpasswd files
# - backup files from being viewed
<FilesMatch  "^(\.ht.*|.*~|.*,v)$">
	<IfModule mod_authz_host.c>
		Require all denied
	</IfModule>
	<IfModule mod_access_compat.c>
		Order deny,allow
		Deny from all
	</IfModule>
</FilesMatch>

# Prevent access to:
# - version control directories
<DirectoryMatch "/\.(svn|git|hg|bzr)|CVS)/?">
	<IfModule mod_authz_host.c>
		Require all denied
	</IfModule>
	<IfModule mod_access_compat.c>
		Order deny,allow
		Deny from all
	</IfModule>
</DirectoryMatch>

#
# This should be changed to whatever you set DocumentRoot to.
#
<Directory "/home/services/httpd/html">
	#
	# Possible values for the Options directive are "None", "All",
	# or any combination of:
	#   Indexes Includes FollowSymLinks SymLinksifOwnerMatch ExecCGI MultiViews
	#
	# Note that "MultiViews" must be named *explicitly* --- "Options All"
	# doesn't give it to you.
	#
	# The Options directive is both complicated and important.  Please see
	# http://httpd.apache.org/docs/2.2/mod/core.html#options
	# for more information.
	#
	Options Indexes FollowSymLinks

	#
	# AllowOverride controls what directives may be placed in .htaccess files.
	# It can be "All", "None", or any combination of the keywords:
	#   Options FileInfo AuthConfig Limit
	#
	AllowOverride None

	#
	# Controls who can get stuff from this server.
	#
	<IfModule mod_authz_host.c>
		Require all granted
	</IfModule>
	<IfModule mod_access_compat.c>
		Order allow,deny
		Allow from all
	</IfModule>

</Directory>