that didn't work - we need to be able to see .well-known/host-meta

.htaccess

@@ -9,8 +9,8 @@ Deny from all
 <IfModule mod_rewrite.c>
   RewriteEngine on
 
-  # Protect dot directories from browsing, e.g. ".git"
-  RewriteRule "(^|/)\." - [F]
+  # Protect repo directory from browsing
+  RewriteRule "(^|/)\.git" - [F]
 
   # Rewrite current-style URLs of the form 'index.php?q=x'.
   RewriteCond %{REQUEST_FILENAME} !-f