Please stop serving .git to the outside world
I recently discovered that I had been serving .git on my blog for a couple of years. All it took to fix was a simple rule in my Nginx config:<p><pre><code>    # Don't expose hidden files to the web
    location ~ /\. {
        return 404;
    }</code></pre>