diff --git a/etc/apache2/conf-available/vpanel.conf b/etc/apache2/conf-available/vpanel.conf
index 42c1320..9ad7430 100644
--- a/etc/apache2/conf-available/vpanel.conf
+++ b/etc/apache2/conf-available/vpanel.conf
@@ -27,11 +27,6 @@ Alias /panel /srv/www/html/panel
   # all hidden files and dirs (anything beginning with a .)
   RewriteRule ^(classes|config|f3|tmp)\/|^\.|^/\. - [R=404]
 
-  # deny direct access to html (template) files
-  <FilesMatch "\.(htm|html)$">
-    Deny from all
-  </FilesMatch>
-
   # Route requests to the framework
   RewriteCond %{REQUEST_FILENAME} !-l
   RewriteCond %{REQUEST_FILENAME} !-f
@@ -40,3 +35,10 @@ Alias /panel /srv/www/html/panel
   RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization},L]
 
 </Directory>
+
+# deny direct access to html (template) files
+<Directory /srv/www/html/panel/ui>
+  <FilesMatch "\.(htm|html)$">
+    Deny from all
+  </FilesMatch>
+</Directory>