How do I block access to config.yml?

The config.yml is in my _site folder so anyone can access it via mysite.com/config.yml
How do I avoid this?

Make sure it’s called _config.yml – then it won’t be output in the _site folder.

2 Likes