view modules/apache/templates/vhost/_block.erb @ 106:ef0926ee389a puppet-3.6

Lock down Apache headers for security, based on https://securityheaders.io/
author IBBoard <dev@ibboard.co.uk>
date Sat, 14 May 2016 17:10:10 +0100
parents 37675581a273
children 675c1cc61eaf
line wrap: on
line source

<% if @block and ! @block.empty? -%>

  ## Block access statements
<% if @block.include? 'scm' -%>
  # Block access to SCM directories.
  <DirectoryMatch .*\.(svn|git|bzr)/.*>
  <%- if scope.function_versioncmp([@apache_version, '2.4']) >= 0 -%>
    Require all denied
  <%- else -%>
    Deny From All
  <%- end -%>
  </DirectoryMatch>
<% end -%>
<% end -%>