container/nextcloud
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add sameorigin header

Browse source
This commit is contained in:
Sebastian Hugentobler 2019-10-08 14:29:57 +02:00
parent 124ee44164
commit 4bae3cb9fa
1 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
rootfs/etc/confd/templates/nextcloud.conf.tmpl
View file

@ -16,6 +16,7 @@ server {
add_header X-Download-Options noopen;
add_header X-Permitted-Cross-Domain-Policies none;
add_header Referrer-Policy no-referrer;
add_header X-Frame-Options "SAMEORIGIN" always;
fastcgi_hide_header X-Powered-By;
@ -28,11 +29,11 @@ server {
}
location = /.well-known/carddav {
return 301 $scheme://$host/remote.php/dav;
return 301 $scheme://$host:$server_port/remote.php/dav;
}
location = /.well-known/caldav {
return 301 $scheme://$host/remote.php/dav;
return 301 $scheme://$host:$server_port/remote.php/dav;
}
client_max_body_size {{getenv "MAX_UPLOAD_SIZE"}};