From b578e567acfcd11b1c2f22f94fe66ba6728747cd Mon Sep 17 00:00:00 2001
From: Christoph Haas <christoph.h@sprinternet.at>
Date: Wed, 2 Jan 2019 12:05:34 +0100
Subject: [PATCH] deny .git

---
 nginx/sites/default.conf | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/nginx/sites/default.conf b/nginx/sites/default.conf
index fe990a8..5ca539d 100644
--- a/nginx/sites/default.conf
+++ b/nginx/sites/default.conf
@@ -26,6 +26,10 @@ server {
         deny all;
     }
 
+    location ~ /\.git {
+        deny all;
+    }
+
     location /.well-known/acme-challenge/ {
         root /var/www/letsencrypt/;
         log_not_found off;