Protect config files from public access

README.md

@@ -52,6 +52,10 @@ server {
         deny all;
         return 403;
     }
+    location ^~ /webmum/config {
+        deny all;
+        return 403;
+    }
 }
 ```
 
@@ -81,6 +85,10 @@ server {
         deny all;
         return 403;
     }
+    location ^~ /config {
+        deny all;
+        return 403;
+    }
 }
 ```
 

config/.htaccess

@@ -0,0 +1 @@
+Deny from all