docker: restrict access to private resources

addresses issue #3

docker/apache/http.conf

@@ -16,11 +16,19 @@ ErrorLog /dev/null
     RewriteRule ^ http://%{HTTP_HOST}/%1 [R=301]
     RewriteCond %{REQUEST_FILENAME}.php -f
     RewriteRule .* $0.php
-    Options Indexes FollowSymLinks
+    Options FollowSymLinks
     AllowOverride None
     Require all granted
 </Directory>
 
+# deny access to private resources
+<Directory "/var/www/html/4get/data">
+    Require all denied
+    <Files "*">
+        Require all denied
+    </Files>
+</Directory>
+
 LoadModule rewrite_module modules/mod_rewrite.so
 LoadModule mpm_prefork_module modules/mod_mpm_prefork.so
 LoadModule authn_file_module modules/mod_authn_file.so

docker/apache/https.conf

@@ -21,12 +21,18 @@ ErrorLog /dev/null
     RewriteRule ^ http://%{HTTP_HOST}/%1 [R=301]
     RewriteCond %{REQUEST_FILENAME}.php -f
     RewriteRule .* $0.php
-    Options Indexes FollowSymLinks
+    Options FollowSymLinks
     AllowOverride None
     Require all granted
 </Directory>
 
-
+# deny access to private resources
+<Directory "/var/www/html/4get/data">
+    Require all denied
+    <Files "*">
+        Require all denied
+    </Files>
+</Directory>
 
 LoadModule rewrite_module modules/mod_rewrite.so
 LoadModule mpm_prefork_module modules/mod_mpm_prefork.so