Hide .git folders from website

QuLogic · QuLogic · commit aefafea09018 · 2022-06-22T15:46:16.000-04:00
This is generally considered a security issue, but it's kind of
meaningless for us since we are serving public repos that contain no
secrets, nor are running any webapps that could accidentally expose
anything from it.

But we can hide to satisfy security scanners.
diff --git a/templates/Caddyfile.j2 b/templates/Caddyfile.j2
@@ -8,7 +8,9 @@
 	handle_path /{args.0}/* {
 		root * {{ caddy.site_dir }}/{args.0}
 		try_files {path}.html {path}
-		file_server
+		file_server {
+			hide .git
+		}
 	}
 }
 
@@ -77,14 +79,18 @@ http://{{ caddy.addresses.main }}, http://{{ ansible_fqdn }} {
 	handle {
 		root * {{ caddy.site_dir }}/matplotlib.github.com
 		try_files {path}.html {path}
-		file_server
+		file_server {
+			hide .git
+		}
 	}
 
 	# Use a custom 404 error page.
 	handle_errors {
 		@notfound expression {http.error.status_code} == 404
 		root * {{ caddy.site_dir }}/mpl-brochure-site
 		rewrite @notfound /404.html
-		file_server
+		file_server {
+			hide .git
+		}
 	}
 }

Original file line number	Diff line number	Diff line change
`@@ -8,7 +8,9 @@`
`8`	`8`	`handle_path /{args.0}/* {`
`9`	`9`	`root * {{ caddy.site_dir }}/{args.0}`
`10`	`10`	`try_files {path}.html {path}`
`11`		`- file_server`
	`11`	`+ file_server {`
	`12`	`+ hide .git`
	`13`	`+ }`
`12`	`14`	`}`
`13`	`15`	`}`
`14`	`16`
`@@ -77,14 +79,18 @@ http://{{ caddy.addresses.main }}, http://{{ ansible_fqdn }} {`
`77`	`79`	`handle {`
`78`	`80`	`root * {{ caddy.site_dir }}/matplotlib.github.com`
`79`	`81`	`try_files {path}.html {path}`
`80`		`- file_server`
	`82`	`+ file_server {`
	`83`	`+ hide .git`
	`84`	`+ }`
`81`	`85`	`}`
`82`	`86`
`83`	`87`	`# Use a custom 404 error page.`
`84`	`88`	`handle_errors {`
`85`	`89`	`@notfound expression {http.error.status_code} == 404`
`86`	`90`	`root * {{ caddy.site_dir }}/mpl-brochure-site`
`87`	`91`	`rewrite @notfound /404.html`
`88`		`- file_server`
	`92`	`+ file_server {`
	`93`	`+ hide .git`
	`94`	`+ }`
`89`	`95`	`}`
`90`	`96`	`}`