How to forbid to walk on server files in the browser?

Question

ubuntu

Now the server is configured so that if I go to ip/ in the browser and enter a folder or file name, if such a file exists, it will open in the browser. How to disable this feature so that a person cannot open the json config.

Answer 1

What web server are you using?
For Apache, this is a directive . Options -Indexes
For Nginx, this is a directive autoindex off;
. To completely prohibit access to a file from the outside, read about Allow and Deny.

Answer 2

.htaccess

Answer 3

so the advice was good, but the devil is in the details.
if these json are requested by your scripts then everything will break.
It makes sense to overlap the php files that are included, or to enter something like an empty line in the header.
And in the general case, it makes sense to make static available to everyone. And api which is available only for tokens.