diff --git a/etc/apache2/sites-enabled/000-default.conf b/etc/apache2/sites-enabled/000-default.conf
index fd1d679..9b42636 100644
--- a/etc/apache2/sites-enabled/000-default.conf
+++ b/etc/apache2/sites-enabled/000-default.conf
@@ -27,6 +27,10 @@ FcgidMaxRequestLen 10485760
  Require all denied
 </Directory>
 
+<DirectoryMatch "/(\.git|config)/">
+  Require all denied
+</DirectoryMatch>
+
         # Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
         # error, crit, alert, emerg.
         # It is also possible to configure the loglevel for particular