From 17271a2f61dbb27df5a9dc6995deff13d8358c9f Mon Sep 17 00:00:00 2001
From: Ben Knowles <benknowles@users.noreply.github.com>
Date: Fri, 4 Jan 2019 17:27:59 -0600
Subject: [PATCH] Disable viewing of .git directory (#214)

---
 debian/resources/nginx/fusionpbx | 15 ++++++++++++---
 1 file changed, 12 insertions(+), 3 deletions(-)

diff --git a/debian/resources/nginx/fusionpbx b/debian/resources/nginx/fusionpbx
index 8fc49d9..5cf9c32 100755
--- a/debian/resources/nginx/fusionpbx
+++ b/debian/resources/nginx/fusionpbx
@@ -31,7 +31,7 @@ server {
 		fastcgi_read_timeout 15m;
 	}
 
-	# Disable viewing .htaccess & .htpassword & .db
+	# Disable viewing .htaccess & .htpassword & .db & .git
 	location ~ .htaccess {
 			deny all;
 	}
@@ -41,6 +41,9 @@ server {
 	location ~^.+.(db)$ {
 			deny all;
 	}
+	location ~ /.git/ {
+			deny all;
+	}
 }
 
 server {
@@ -137,7 +140,7 @@ server {
 		fastcgi_read_timeout 15m;
 	}
 
-	# Disable viewing .htaccess & .htpassword & .db
+	# Disable viewing .htaccess & .htpassword & .db & .git
 	location ~ .htaccess {
 		deny all;
 	}
@@ -147,6 +150,9 @@ server {
 	location ~^.+.(db)$ {
 		deny all;
 	}
+	location ~ /.git/ {
+		deny all;
+	}
 }
 
 server {
@@ -243,7 +249,7 @@ server {
 		fastcgi_read_timeout 15m;
 	}
 
-	# Disable viewing .htaccess & .htpassword & .db
+	# Disable viewing .htaccess & .htpassword & .db & .git
 	location ~ .htaccess {
 		deny all;
 	}
@@ -253,4 +259,7 @@ server {
 	location ~^.+.(db)$ {
 		deny all;
 	}
+	location ~ /.git/ {
+		deny all;
+	}
 }