[ionfish]

For your Apache config.

  # Disallow viewing of .svn and .git directory contents
  <DirectoryMatch \.(svn|git)>
    Order allow,deny
    Deny from all
  </DirectoryMatch>

[bcl]

May as well throw in .hg

Oh. Now we're blacklisting.

If you are going to use this solution, you are better off blacklisting all dotfiles except .htaccess, assuming you allow it.

[ionfish]

Even if you do use .htaccess files, you still shouldn't be showing them to anyone who requests them from your web server!

[bcl]

Ha! Correct!

[patio11]

For Nginx:

location ~ /\.(svn|git) { deny all; }

[djdarkbeat]

  # Disallow viewing of .svn and .git and .hg directory contents
  <Directory ~ \.(svn|git|hg)>
    Order allow,deny
    Deny from all
  </Directory>

[djdarkbeat]

As well as leaving .gitignore exposed also.