diff --git a/templates/vhost-proxy.conf.erb b/templates/vhost-proxy.conf.erb
index 5e5818c..24d0a73 100644
--- a/templates/vhost-proxy.conf.erb
+++ b/templates/vhost-proxy.conf.erb
@@ -33,6 +33,13 @@ NameVirtualHost <%= @vhost_name %>:<%= @port %>
 
 <% if @proxyexclusions != nil and @docroot != nil %>
    DocumentRoot <%= @docroot %>
+   <Directory <%= @docroot %>>
+     Order deny,allow
+     Allow from all
+    <IfVersion >= 2.4>
+      Require all granted
+    </IfVersion>
+   </Directory>
 <% end %>
    ErrorLog /var/log/<%= scope.lookupvar("httpd::params::apache_name") %>/<%= @name %>_error.log
    LogLevel warn