From 50e4979c050007df5718e0526ace546429664b4f Mon Sep 17 00:00:00 2001
From: Tom Hughes <tom@compton.nu>
Date: Sun, 24 Jun 2018 17:04:43 +0100
Subject: [PATCH] Deny all https access to the private chef repo

---
 cookbooks/git/templates/default/apache.erb | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/cookbooks/git/templates/default/apache.erb b/cookbooks/git/templates/default/apache.erb
index 374ec2cf5..9ec36f7d8 100644
--- a/cookbooks/git/templates/default/apache.erb
+++ b/cookbooks/git/templates/default/apache.erb
@@ -60,6 +60,10 @@
         <Location /private>
                   Require ip <%= @private_allowed.sort.join(" ") %>
         </Location>
+
+        <Location /private/chef.git>
+                  Require all denied
+        </Location>
 </VirtualHost>
 
 <Directory /usr/lib/git-core>
-- 
2.43.2