From f6d6c030801355b1a6264920cce0f6b733f303cc Mon Sep 17 00:00:00 2001 From: Eric Nemchik Date: Sat, 24 Jun 2023 20:43:42 -0500 Subject: [PATCH] Re-include comment about NC security scans Signed-off-by: Eric Nemchik --- nextcloud.subdomain.conf.sample | 1 + nextcloud.subfolder.conf.sample | 1 + 2 files changed, 2 insertions(+) diff --git a/nextcloud.subdomain.conf.sample b/nextcloud.subdomain.conf.sample index afb4a00..5fb72f8 100644 --- a/nextcloud.subdomain.conf.sample +++ b/nextcloud.subdomain.conf.sample @@ -33,6 +33,7 @@ server { proxy_pass $upstream_proto://$upstream_app:$upstream_port; # Hide proxy response headers from Nextcloud that conflict with ssl.conf + # Uncomment the Optional additional headers in SWAG's ssl.conf to pass Nextcloud's security scan proxy_hide_header Referrer-Policy; proxy_hide_header X-Content-Type-Options; proxy_hide_header X-Frame-Options; diff --git a/nextcloud.subfolder.conf.sample b/nextcloud.subfolder.conf.sample index 2ad882e..ca259da 100644 --- a/nextcloud.subfolder.conf.sample +++ b/nextcloud.subfolder.conf.sample @@ -40,6 +40,7 @@ location ^~ /nextcloud/ { proxy_ssl_session_reuse off; # Hide proxy response headers from Nextcloud that conflict with ssl.conf + # Uncomment the Optional additional headers in SWAG's ssl.conf to pass Nextcloud's security scan proxy_hide_header Referrer-Policy; proxy_hide_header X-Content-Type-Options; proxy_hide_header X-Frame-Options;