diff options
| author | Giuseppe C <AvverbioPronome@users.noreply.github.com> | 2020-07-24 10:37:58 +0300 |
|---|---|---|
| committer | nachoparker <nacho@ownyourbits.com> | 2020-08-31 02:27:35 +0300 |
| commit | c143accdfcffa15a3a93773a6da77660a015375b (patch) | |
| tree | 491dd2db54f734c1f5340b544f8bce42c196eb0b /bin | |
| parent | c506b22f9e34f76b0cc5efda159993231d6019df (diff) | |
do not hsts preload by default, only serve hsts header over httpsv1.29.7
Signed-off-by: Giuseppe C <AvverbioPronome@users.noreply.github.com>
Diffstat (limited to 'bin')
| -rw-r--r-- | bin/ncp/CONFIG/nc-nextcloud.sh | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/bin/ncp/CONFIG/nc-nextcloud.sh b/bin/ncp/CONFIG/nc-nextcloud.sh index fb1205bb..de5f45a2 100644 --- a/bin/ncp/CONFIG/nc-nextcloud.sh +++ b/bin/ncp/CONFIG/nc-nextcloud.sh @@ -194,6 +194,9 @@ EOF LimitRequestBody 0 SSLRenegBufferSize 10486000 </Directory> + <IfModule mod_headers.c> + Header always set Strict-Transport-Security "max-age=15768000; includeSubDomains" + </IfModule> </IfModule> EOF a2ensite nextcloud @@ -206,6 +209,14 @@ EOF RewriteCond %{HTTPS} !=on RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R,L] </IfModule> + <Directory /var/www/nextcloud/> + Options +FollowSymlinks + AllowOverride All + <IfModule mod_dav.c> + Dav off + </IfModule> + LimitRequestBody 0 + </Directory> </VirtualHost> EOF |