Something I had not done for my website was blocking directory listing of files on my web server. I do this for a couple of reasons. One is privacy. I store some files on my web server that I don’t necessarily want to be sharing with everyone. None of the stuff is top secret or valuable, but from time to time I might drop a PDF or MP3 on the web server so that I can retrieve it at a later date.
The other reason to hide the directory listing is to keep others from easily identifying vulnerabilities on the site. This isn’t a security measure by any means, but it keeps people from nosing around.
Read more about how to prevent a directory listing of your website here.