diff --git a/.gitignore b/.gitignore
index 70f08e79f..86acca7ad 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,9 +1,14 @@
 
 # no slash at the end to handle also symlinks
 /toolkit
-/conf
 /env-*
 
+# listing prevention in conf directory
+/conf/**
+!/conf/.htaccess
+!/conf/index.php
+!/conf/web.config
+
 # composer reserver directory, from sources, populate/update using "composer install"
 vendor/*
 test/vendor/*
diff --git a/conf/.htaccess b/conf/.htaccess
new file mode 100644
index 000000000..782472c78
--- /dev/null
+++ b/conf/.htaccess
@@ -0,0 +1,13 @@
+# Apache 2.4
+<ifModule mod_authz_core.c>
+Require all denied
+</ifModule>
+
+# Apache 2.2
+<ifModule !mod_authz_core.c>
+deny from all
+Satisfy All
+</ifModule>
+
+# Apache 2.2 and 2.4
+IndexIgnore *
diff --git a/conf/index.php b/conf/index.php
new file mode 100644
index 000000000..112807643
--- /dev/null
+++ b/conf/index.php
@@ -0,0 +1,2 @@
+<?php
+echo 'Access denied';
diff --git a/conf/web.config b/conf/web.config
new file mode 100644
index 000000000..599a5f260
--- /dev/null
+++ b/conf/web.config
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<configuration>
+  <system.web>
+          <authorization>
+                  <deny users="*" /> <!-- Denies all users -->
+          </authorization>
+  </system.web>
+</configuration>
\ No newline at end of file