Disable Nginx Directory Listing on Ubuntu 24.04

Disable directory listing

You can disable Nginx directory listing across your entire Ubuntu 24.04 server by editing the main configuration file at /etc/nginx/nginx.conf. Add the command autoindex off; inside the http block to stop Nginx from showing your file folders to the public when an index page is missing.

You will find a line in the Nginx configuration file that controls directory listing. This directory listing feature is enabled by default in Nginx.

Run the command below to open the global configuration file.

sudo nano /etc/nginx/nginx.conf

The http {} block with the ‘autoindex‘ option enables or disables directory listing in Nginx globally.

http {

        ##
        # Basic Settings
        ##

        sendfile on;
        tcp_nopush on;
        types_hash_max_size 2048;
        # server_tokens off;

        autoindex on;

....
}

Remove or add the 'autoindex on;' line in the configuration to enable directory listing globally.

If you want to disable the directory listing for all content in Nginx, change the block above to the one below.

http {

        ##
        # Basic Settings
        ##

        sendfile on;
        tcp_nopush on;
        types_hash_max_size 2048;
        # server_tokens off;

        autoindex off;

....
}

Save the exit the file.

Restart Nginx to apply your changes.

Add the 'autoindex on;' to re-enable the directory listing.

Disable directory listing selectively

You can disable Nginx directory listing for a single website without affecting your other projects by editing that specific site's configuration file in /etc/nginx/sites-available/. Open the file, add autoindex off; inside the server block, and reload the web server to hide your files for that domain only.

For example, here's a basic configuration for a website that disables directory listing.

server {
        listen 80 default_server;
        listen [::]:80 default_server;
        root /var/www/html;
        index index.html index.htm index.nginx-debian.html;
        server_name _;
        
location / {
        autoindex off;
        try_files $uri $uri/ =404;
        }
}

This configuration only impacts the /var/www/html/ website in Nginx's directory.

That should do it!

Conclusion:

• Enabling directory listing allows users to see directory contents, which may be useful for public access.
• Disabling directory listing enhances security by preventing unauthorized exploration of files.
• The global setting in Nginx can easily be adjusted in the nginx.conf file.
• Selective configuration in individual website files provides flexibility in managing directory listing.
• Always remember to restart Nginx after making changes to apply the new settings.