From 9e1072b81773c74906d629c8235fdae6d84a3786 Mon Sep 17 00:00:00 2001
From: Tom Hughes <tom@compton.nu>
Date: Mon, 21 Mar 2022 00:47:04 +0000
Subject: [PATCH] Block access to some piwik internals

---
 cookbooks/piwik/templates/default/apache.erb | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/cookbooks/piwik/templates/default/apache.erb b/cookbooks/piwik/templates/default/apache.erb
index f513ce9c2..f1278a31f 100644
--- a/cookbooks/piwik/templates/default/apache.erb
+++ b/cookbooks/piwik/templates/default/apache.erb
@@ -15,6 +15,11 @@
 	Options -Indexes
 
 	DocumentRoot /srv/piwik.openstreetmap.org
+
+	Redirect 403 /core/
+	Redirect 403 /config/
+	Redirect 403 /lang/
+	Redirect 403 /tmp/
 </VirtualHost>
 
 <VirtualHost *:80>
-- 
2.39.5