How to close the root folder of the Apache server?

Posted December 2, 2014

if you type the IP address of my droplet in the address bar, will be seen a list of all folders and sites: http://hsto.org/files/8d8/d9e/e91/8d8d9ee9142c469eaf3a3dd1bd4cbe74.png

How do I remove the display of all the folders and files?

I tried to put a .htaccess file in the root folder. In the .htaccess file, wrote the following:

Order deny,allow
Deny from all

Options All -Indexes

this has no effect (.htaccess file is not displayed in the file list).

Google does not help (googled on requests like “apache close server root directory”)

Ubuntu 12.04, Apache, multiple domains on a single droplet.

How can i fix it?

petrovnn

Kamal Nasser • December 3, 2014

It looks like Apache isn’t running. According to the documentation for AllowOverride, it can only be used in a <Directory /> block. If you only need to apply that directive to /var/www, I would just add it to apache2.conf instead of an htaccess file:

Replace

AllowOverride All

<Directory /var/www/plugindetector.com/public_html/>
    AllowOverride None
</Directory>

with

<Directory /var/www>
    Order Allow,Deny
    Deny from All
</Directory>

and then start Apache:

sudo service apache2 start

Ryan Quinn • December 2, 2014

In your configuration for this virtualhost do you currently have

AllowOverride None

If so, apache will ignore directives included in an .htaccess file. Try replacing this with

AllowOverride All

and then restart apache with

service apache2 restart

petrovnn • December 3, 2014

virtual hosts on my server created by this instruction: https://www.digitalocean.com/community/tutorials/how-to-set-up-apache-virtual-hosts-on-ubuntu-12-04-lts

petrovnn • December 3, 2014

ryanpq, this line is cut off, including all virtual hosts on the server: http://plugindetector.com/

I tried to override this default for nested folders, but it did not work:

AllowOverride All

<Directory /var/www/plugindetector.com/public_html/>
	AllowOverride None
</Directory>

maybe there’s another way to block the root folder of the server?

petrovnn • December 3, 2014

Thank you!

this string in /etc/apache2/apache2.conf has solved the problem

AllowOverride All

in the configuration has not been value AllowOverride.

now appears as follows (webpage is not available): http://188.226.137.130/

Submit an answer

You can type!ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Andrew SB • June 8, 2016

This question was answered by @kamaln7:

It looks like Apache isn’t running. According to the documentation for AllowOverride, it can only be used in a <Directory /> block. If you only need to apply that directive to /var/www, I would just add it to apache2.conf instead of an htaccess file:

Replace
AllowOverride All

<Directory /var/www/plugindetector.com/public_html/>
   AllowOverride None
</Directory>
with
<Directory /var/www>
   Order Allow,Deny
   Deny from All
</Directory>
and then start Apache:
sudo service apache2 start

View the original comment