Data directory always outside web root?

[JasonBayton]

@linucksrox

However, it does seem to be possible if you’re willing to make manual changes to the config file and database (there are some relative paths, but there are some full paths as well which would need to be updated by hand or with update queries).

There’s a safe way to do it after installation. It’s technically still somewhat exposing the data dir though I suppose.

Is there a safe and reliable way to move data directory out of web root?

For future reference folks, you can also just symlink from /var/www/data (or wherever you set it up initially) to your new location after moving everything. I’m personally a fan of sudo rsync -avP as it preserves all files, permissions, ownership and shows progress as it goes, then deleting the original when I’ve confirmed everything (including hidden files) has been copied over. That way there’s no need to update the DB and you won’t be told that’s unsupported.