Hacker News Reader

This approach is fine for static websites, but for web applications you should probably block requests to /.git so that people can’t clone your application off of the web.

View on HN

The .git directory doesn't necessarily need to be in the public directory at all.

If anyone wants to read more about this, search for `GIT_DIR` and `GIT_WORK_TREE` environment variables.

Or, put your files under html/ in your repo, and push to /var/wwwroot (using the common /var/wwwroot/html setup)

It is always good reminder anyway to tell people to either make public dir not root of repo or block .git.

Reply on news.ycombinator.com