From 307f5966c284fb9ef612efdc2dfe441846cfeea5 Mon Sep 17 00:00:00 2001
From: jlssmt <42897917+jlssmt@users.noreply.github.com>
Date: Mon, 6 Feb 2023 12:28:51 +0100
Subject: [PATCH] Update nextcloud.subdomain.conf.sample
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

HTTP header is not set to “SAMEORIGIN
---
 nextcloud.subdomain.conf.sample | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nextcloud.subdomain.conf.sample b/nextcloud.subdomain.conf.sample
index 27c2ea5..2e419f5 100644
--- a/nextcloud.subdomain.conf.sample
+++ b/nextcloud.subdomain.conf.sample
@@ -32,6 +32,7 @@ server {
         proxy_pass $upstream_proto://$upstream_app:$upstream_port;
 
         proxy_hide_header X-Frame-Options;
+        add_header X-Frame-Options "SAMEORIGIN";
         proxy_max_temp_file_size 2048m;
     }
 }