fluxbb, flyspray: Deny access to /.git

The gitdirs are just clones of public repos and don't seem to contain
anything sensitive but better safe than sorry.

Thanks to Christian Rebischke <chris@shibumi.dev>

roles/fluxbb/templates/nginx.conf.j2

@@ -33,6 +33,10 @@ server {
     ssl_certificate_key  /etc/letsencrypt/live/{{ fluxbb_domain }}/privkey.pem;
     ssl_trusted_certificate /etc/letsencrypt/live/{{ fluxbb_domain }}/chain.pem;
 
+    location /.git {
+        deny all;
+    }
+
     location ~ /extern\.php {
         limit_req zone=rsslimit burst=10 nodelay;
         fastcgi_pass   unix:/run/php-fpm/fluxbb.socket;

roles/flyspray/templates/nginx.d.conf.j2

@@ -32,6 +32,10 @@ server {
 
     root {{ flyspray_dir }};
 
+    location /.git {
+        deny all;
+    }
+
     location /setup {
         deny all;
     }