deny .git/ is now server global, also turn off indexes