diff --git a/v2-varnish/WordPress/WordPress b/v2-varnish/WordPress/WordPress
index 160c0bc..6b64d12 100644
--- a/v2-varnish/WordPress/WordPress
+++ b/v2-varnish/WordPress/WordPress
@@ -50,6 +50,10 @@ server {
 
   {{settings}}
 
+  location ~/\.git {
+    deny all;
+  }
+
   location ~/(wp-admin/|wp-login.php) {
     proxy_set_header X-Real-IP $remote_addr;
     proxy_set_header X-Forwarded-For $remote_addr;