## Block access to SCM directories. Require all denied # Don't add here, extensions like .sql .bak .ini .log ... Instead use apache_block['dot'] ## Block access to backup and source files Require all denied # Don't add here, scm like .git .svn .bzr ... Instead use apache_block['scm'] RequestHeader unset Proxy