Files

37 lines
1.2 KiB
Plaintext

<VirtualHost *:80>
ServerAdmin webmaster@localhost
ServerName localhost
DocumentRoot /var/www/html
# ── AllowOverride All — required for .htaccess rewrite rules ────────────
<Directory /var/www/html>
Options -Indexes +FollowSymLinks
AllowOverride All
Require all granted
</Directory>
# ── Defense-in-depth: deny direct HTTP access to protected directories ──
# These directories also have their own .htaccess deny rules, but we
# enforce it at the vhost level as well in case AllowOverride is changed.
<Directory /var/www/html/config>
Require all denied
</Directory>
<Directory /var/www/html/src>
Require all denied
</Directory>
<Directory /var/www/html/sessions>
Require all denied
</Directory>
<Directory /var/www/html/templates>
Require all denied
</Directory>
# ── Logging ─────────────────────────────────────────────────────────────
ErrorLog ${APACHE_LOG_DIR}/error.log
CustomLog ${APACHE_LOG_DIR}/access.log combined
</VirtualHost>