We include: debian/templates/apache-shared-opac.conf: AliasMatch "^/sitemap(.*)" "/var/lib/koha/${instance}/sitemap/sitemap$1" But if you do not use this sitemap (with koha-sitemap script), you would expect a 404 and not 403 on unexisting directory.