Merge pull request #572 from BlockListed/documenting_nextcloud_security

improve documentation for nextcloud security
This commit is contained in:
Eric Nemchik 2023-05-10 15:36:31 -05:00 committed by GitHub
commit 193da492bf
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 4 additions and 2 deletions

View file

@ -1,4 +1,4 @@
## Version 2023/02/05 ## Version 2023/05/10
# make sure that your nextcloud container is named nextcloud # make sure that your nextcloud container is named nextcloud
# make sure that your dns has a cname set for nextcloud # make sure that your dns has a cname set for nextcloud
# assuming this container is called "swag", edit your nextcloud container's config # assuming this container is called "swag", edit your nextcloud container's config
@ -32,6 +32,7 @@ server {
set $upstream_proto https; set $upstream_proto https;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
# Uncomment X-Frame-Options directive in ssl.conf to pass security checks.
proxy_hide_header X-Frame-Options; proxy_hide_header X-Frame-Options;
proxy_max_temp_file_size 2048m; proxy_max_temp_file_size 2048m;
} }

View file

@ -1,4 +1,4 @@
## Version 2023/02/05 ## Version 2023/05/10
# make sure that your nextcloud container is named nextcloud # make sure that your nextcloud container is named nextcloud
# make sure that nextcloud is set to work with the base url /nextcloud/ # make sure that nextcloud is set to work with the base url /nextcloud/
# Assuming this container is called "swag", edit your nextcloud container's config # Assuming this container is called "swag", edit your nextcloud container's config
@ -34,6 +34,7 @@ location ^~ /nextcloud/ {
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
rewrite /nextcloud(.*) $1 break; rewrite /nextcloud(.*) $1 break;
# Uncomment X-Frame-Options directive in ssl.conf to pass security checks.
proxy_hide_header X-Frame-Options; proxy_hide_header X-Frame-Options;
proxy_max_temp_file_size 2048m; proxy_max_temp_file_size 2048m;
proxy_set_header Range $http_range; proxy_set_header Range $http_range;