From fe99b08bdda05aaf97378feee1820aecb7de69df Mon Sep 17 00:00:00 2001
From: Basil Bruhn <basil.bruhn@psi.ch>
Date: Tue, 11 Nov 2025 12:26:57 +0100
Subject: [PATCH] apache config document root disable

Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
---
 apache/conf/httpd.conf | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/apache/conf/httpd.conf b/apache/conf/httpd.conf
index f4edc99..1325bf0 100644
--- a/apache/conf/httpd.conf
+++ b/apache/conf/httpd.conf
@@ -3,6 +3,11 @@ LoadModule cgi_module modules/mod_cgi.so
 LoadModule rewrite_module modules/mod_rewrite.so
 LoadModule php_module modules/libphp.so  # already in php:8.2-apache
 
+# Disable default doc root
+<Directory "/var/www/html">
+    Require all denied
+</Directory>
+
 # RFMTools
 DocumentRoot "/var/www/rfmwtools"