diff --git a/.htaccess.in b/.htaccess.in
new file mode 100644
--- /dev/null
+++ b/.htaccess.in
@@ -0,0 +1,28 @@
+<Files ".*">
+order allow,deny
+Deny from all
+</Files>
+
+<Files "docutils.conf">
+order allow,deny
+Deny from all
+</Files>
+
+<Files "sync.sh">
+order allow,deny
+Deny from all
+</Files>
+
+<Files "Makefile">
+order allow,deny
+Deny from all
+</Files>
+
+AuthUserFile @base_dir@/lib/.htpasswd
+# AuthGroupFile .htgroup
+
+# User authorization
+AuthType Basic
+AuthName "Urlaubseinstellungen"
+require valid-user
+