hedgedoc: Fix irrelevant access to hedgedoc instance
DSI notified us that clear access is possible from:
This was not intended.
Find a way to make varnish not serve those urls, a 403 would do.
Migrated from T2962 (view on Phabricator)
Edited by Antoine R. Dumont