From 9359efb8c4f5176d4a9f0a91a7461ae208c82efd Mon Sep 17 00:00:00 2001
From: Antonio Ospite <ao2@ao2.it>
Date: Thu, 16 Nov 2017 13:08:34 +0100
Subject: [PATCH] new.sh: add a basic .htaccess file to protect sensible files

---
 libexec/new.sh | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/libexec/new.sh b/libexec/new.sh
index 012c3cb..385c141 100755
--- a/libexec/new.sh
+++ b/libexec/new.sh
@@ -116,6 +116,17 @@ EOF
 
 echo
 echo "Uncomment and customize the values in the bootstrap.conf file."
-echo "Make sure that access to '$PWD' is restricted by the web server."
+
+# Add some basic access control to protect sensitive files like bootstrap.conf
+cat > .htaccess <<EOF
+Options -Indexes
+SetEnvIf Request_URI "/web/.*" access_granted
+Order allow,deny
+Allow from env=access_granted
+EOF
+
+echo
+echo "Double check the provided .htaccess file to make sure that access to"
+echo "'$PWD' is restricted by the web server."
 
 popd
-- 
2.1.4