This entire directory should be overwritten via bind-mount in a production
environment unless you're serving simple static files from webroot.