- Modifié
Je vais un peu mélanger mais... également, j'ai remarqué que mon nextcloud ne prend pas en compte un/des include(s)
headers_params
add_header X-Frame-Options SAMEORIGIN;
add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block";
Le vhost de mon nextcloud
server {
listen 8000;
server_name xx.xxxxx.com;
return 301 https://$host$request_uri;
}
server {
listen 4430 ssl http2;
server_name xx.xxxxx.com;
ssl_certificate /certs/xxxx.com/fullchain.pem;
ssl_certificate_key /certs/xxx.com/privkey.pem;
include /conf.d/ssl_params;
include /conf.d/headers_params;
add_header Strict-Transport-Security "max-age=31536000;includeSubDomains;preload";
client_max_body_size 50M;
#auth_basic "Who's this?";
#auth_basic_user_file /passwds/<NAME>.htpasswd;
location / {
proxy_pass http://nextcloud:8888;
include /conf.d/proxy_params;
}
}
Pas d'erreur nginx, pensez-vous que Cloudflare peut-être à l'origine ?