Only sometimes, when visiting our Wordpress site, we see the directory listing instead of the homepage. This is most reliably reproduced by visiting the site in an incognito browser, where we get the directory listing. On the internal pages, we'll sometimes get :
User Agent: *
disallow: /
A refresh of the page will then show the correct page (in both instances).
This is a Redhat machine that has Apache 2.4.6 and PHP 7.2.24 FPM/FastCGI. The virtual hosts file has this for the directory:
<VirtualHost *:443>
<Location "/">
SSLRenegBufferSize 904860000
</Location>
# General setup for the virtual host, inherited from global configuration
DocumentRoot "/app001/www/help"
ServerName [domain]:443
<Directory "/app001/www/help">
Options Indexes FollowSymLinks Includes ExecCGI
AllowOverride All
Order deny,allow
Allow from all
Require all granted
DirectoryIndex index.php index.html
</Directory>
<IfModule dir_module>
DirectoryIndex index.html index.php
</IfModule>
# Use separate log files for the SSL virtual host; note that LogLevel
# is not inherited from httpd.conf.
[LOG STUFF]
[SSL STUFF]
</VirtualHost>
[Update] I've created a cypress script to check the site (because it's intermittent I want to know right away). This happens everytime with Cypress - not sure if that helps, but adding the info:
It's been quite a while since I worked on apache configuration stuff - I'm not sure where to look next.
[Edit] This seems to happen daily, and when we clear mod_cache everything seems to work fine until the next day. I recently made a change to the cache.conf file to add this line: CacheQuickHandler off. As a result, the cypress script now passes and we get the actual website. However, we're still getting the .htaccess file at once a day (one of our team, or someone else reports it). I understand that I can deny access to the file, but then the browser simply displays the forbidden page.
[EDIT] I used redbot.org to test this out. When I first checked, the Content-Type was text/html. I then went to the RSS url of the site and checked redbot again, now the Content-Type was text/plain (Still hitting the homepage).
