From d23adbd4c2734908c1d68cde034f21414ec50eb3 Mon Sep 17 00:00:00 2001
From: h7x4 <h7x4@nani.wtf>
Date: Wed, 17 Jun 2026 08:47:54 +0900
Subject: [PATCH] temmie/userweb: deny access to `documentRoot`

---
 hosts/temmie/services/userweb/httpd.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/hosts/temmie/services/userweb/httpd.nix b/hosts/temmie/services/userweb/httpd.nix
index 1c46246..8d66852 100644
--- a/hosts/temmie/services/userweb/httpd.nix
+++ b/hosts/temmie/services/userweb/httpd.nix
@@ -63,6 +63,10 @@ in
       ];
 
       extraConfig = ''
+        <Directory "${pkgs.emptyDirectory}">
+          Require all denied
+        </Directory>
+
         CustomLog "${cfg.logDir}/access.log" combined
         CustomLog "/run/httpd-log-processor-access.fifo" combined
         ErrorLog "/run/httpd-log-processor-error.fifo"