Please stop serving .git to the outside world
I recently discovered that I had been serving .git on my blog for a couple of years. All it took to fix was a simple rule in my Nginx config:    # Don't expose hidden files to the web
    location ~ /\. {
        return 404;
    }