From a407fbe38ff50772146cc9d10e44f6923ae8e6e1 Mon Sep 17 00:00:00 2001
From: Shin <2082119+shinsenter@users.noreply.github.com>
Date: Tue, 3 Nov 2026 17:25:49 +0900
Subject: [PATCH] fix(docker): do not serve dotfiles from the default Caddyfile

---
 caddy/frankenphp/Caddyfile | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/caddy/frankenphp/Caddyfile b/caddy/frankenphp/Caddyfile
index cc9bd523fe..d4a3aa77be 100644
--- a/caddy/frankenphp/Caddyfile
+++ b/caddy/frankenphp/Caddyfile
@@ -56,6 +56,13 @@
 	#}
 	#vulcain
 
+	# Do not serve dotfiles such as .env and .git, except .well-known
+	@dotfiles {
+		path_regexp (^|/)\.
+		not path /.well-known/*
+	}
+	respond @dotfiles 404
+
 	{$CADDY_SERVER_EXTRA_DIRECTIVES}
 
 	php_server {