Move everything that should be accessible from the webserver into a public/ directory. Previously the document root was the root of the repository, which is not great.