From 9c17d2b696e026eeca9d4c4b862f839479bbae64 Mon Sep 17 00:00:00 2001
From: mh <mh@immerda.ch>
Date: Sun, 17 Mar 2013 15:51:55 +0100
Subject: deny directories that shouldn't be web accessible

---
 templates/vhosts/php_joomla/partial.erb | 13 +++++++++++++
 1 file changed, 13 insertions(+)

(limited to 'templates/vhosts/php_joomla/partial.erb')

diff --git a/templates/vhosts/php_joomla/partial.erb b/templates/vhosts/php_joomla/partial.erb
index 526352a..3046129 100644
--- a/templates/vhosts/php_joomla/partial.erb
+++ b/templates/vhosts/php_joomla/partial.erb
@@ -17,3 +17,16 @@
         RewriteCond %{REQUEST_URI} (.*/administrator/.*)
         RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R]
     </Directory>
+
+    # Deny various directories that
+    # shouldn't be webaccessible
+    <Directory "<%= documentroot %>/tmp/">
+       Deny From All
+    </Directory>
+    <Directory "<%= documentroot %>/logs/">
+       Deny From All
+    </Directory>
+    <Directory "<%= documentroot %>/cli/">
+       Deny From All
+    </Directory>
+
-- 
cgit v1.2.3