/wp-content/uploads indexing

[scjudd]

Right now you can browse the /wp-content/uploads directory of a site deployed from this image.

I've fixed this by adding the following line to each of my derived images:

RUN sed -i 's/Indexes //g' /etc/apache2/apache2.conf

I'm sure there's a less dangerous way of doing the above, but I'm thinking that disabling indexes should be the default behavior. Thoughts?

[yosifkit]

You are right, Indexes should be turned off. Maybe just a change in the .htaccess would be simpler?

[scjudd]

Sounds good to me, especially since we're already using .htaccess for apache configuration.

[tianon]

Shouldn't we just change the default config in php:apache directly?