diff --git a/docker/haproxy/haproxy.conf b/docker/haproxy/haproxy.conf
index 93e3e23..a4cc11c 100644
--- a/docker/haproxy/haproxy.conf
+++ b/docker/haproxy/haproxy.conf
@@ -49,6 +49,9 @@ frontend website
     acl is_api hdr_beg(host) api.
     acl is_admin hdr_beg(host) admin.
 
+    acl is_root path -i /
+    http-request deny if is_pad is_root
+
     use_backend letsencrypt if { path_beg /.well-known/acme-challenge/ }
     use_backend be_api if is_nextcloud { path_beg /avatar/ }
     use_backend be_nextcloud if is_nextcloud