I'm deploying some sort of file exchange based on the assumption that the files are accessible only to the person which knows the folder path on the server (ex. mydomain.tld/privatesecretfolder/
). I've enabled the autoindex feature in Nginx and created a dummy index.html file inside the document root.
Now my question: is it possible for someone to generate a directory index (with full view of the supersecretfolders) even when index.html is present?
Just as a reference the section which enables autoindexes:
location ~/ {
autoindex on;
}