From b009da31afc9fd74adf49b4f37b7b009b29bf9ee Mon Sep 17 00:00:00 2001
From: h7x4 <h7x4@nani.wtf>
Date: Sun, 10 May 2026 03:33:38 +0900
Subject: [PATCH] temmie/userweb: deny a bunch of spooky directories by default

It should still be possible for the user to re-enable these with
`.htaccess`
---
 hosts/temmie/services/userweb.nix | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/hosts/temmie/services/userweb.nix b/hosts/temmie/services/userweb.nix
index ed4dc8c..7dab052 100644
--- a/hosts/temmie/services/userweb.nix
+++ b/hosts/temmie/services/userweb.nix
@@ -226,6 +226,25 @@ in
           AllowOverride All
           Require all granted
         </Directory>
+
+        <DirectoryMatch "^/home/pvv/.*/web-docs/(${lib.concatStringsSep "|" [
+          "\\.git"
+          "\\.hg"
+          "\\.svn"
+          "\\.ssh"
+          "\\.env"
+          "\\.envrc"
+          "\\.bzr"
+          "\\.venv"
+          "CVS"
+          "RCS"
+          ".*\\.swp"
+          ".*\\.bak"
+          ".*~"
+        ]})(/|$)">
+            AllowOverride All
+            Require all denied
+        </DirectoryMatch>
       '';
     };
   };