Autoindexing enabled in the production NGINX config - security/privacy risk, or I'm missing something?

[mrrfv]

Hi!

While setting this up on my server, I've noticed that the example production nginx config has autoindexing enabled for the static and user media directories.

Autoindexing is potentially dangerous, as it might cause the web server to disclose information about files that were intended to be only accessible through their URL and not an automatic listing. I've set this up with autoindex off; and everything seems to work as expected.

Is there any reason this is enabled by default? Thanks

[victor-rds]

None, there is no reason, I don't use nginx so this is probably my mistake by "copy & paste".