diff --git a/manifests/userdomain.pp b/manifests/userdomain.pp
index 717cf73bf049a26be2d2564c0fce2129da0ca7a5..772282b0118874174faa44a9c480732ee1f6dfb7 100644
--- a/manifests/userdomain.pp
+++ b/manifests/userdomain.pp
@@ -166,6 +166,15 @@ class knuth::userdomain {
     enable => true,
   }
 
+  nginx::resource::location { 'blacklist git':
+    server              => 'default_server',
+    ssl                 => true,
+    location            => '= /.git',
+    location_cfg_append => {
+      'return'          => '403 Forbidden.',
+    }
+  }
+
   nginx::resource::location {
   default:
     server               => 'default_server',