From 083e87b2ace0e3a0446b484d19c7201e133d1997 Mon Sep 17 00:00:00 2001
From: lolcat <will@lolcat.ca>
Date: Mon, 8 Jun 2026 01:06:51 -0400
Subject: fix ACL rules for apache2

---
 docs/apache2.md | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

(limited to 'docs/apache2.md')

diff --git a/docs/apache2.md b/docs/apache2.md
index ea337d6..7e545b3 100644
--- a/docs/apache2.md
+++ b/docs/apache2.md
@@ -104,9 +104,13 @@ Now, edit the following file: `/etc/apache2/sites-available/000-default.conf`, r
 	</Directory>
 	
 	# deny access to private resources
-	<Directory /var/www/4get/data/>
-		Order Deny,allow
-		Deny from all
+	<DirectoryMatch "^/var/www/4get/(data|lib|scraper|template|oracles|docs|docker|extra)/">
+		Require all denied
+	</DirectoryMatch>
+
+	# remove directory listing from /icons
+	<Directory /var/www/4get/icons>
+		Options -Indexes
 	</Directory>
 </VirtualHost>
 ```
-- 
cgit v1.2.3