The minus sign ( -Indexes ) disables directory listings. Restart Apache:

The word "install" transforms a passive leak into an active breach. Here is why: