Compare commits

...

15 Commits

Author SHA1 Message Date
Eric Nemchik 5432119b35 Move dotfile denial up
Signed-off-by: Eric Nemchik <eric@nemchik.com>
2026-05-05 16:53:27 -05:00
Eric Nemchik 93a31b92d8 Remove duplicate configuration for '.well-known' directory 2026-05-04 15:52:09 -05:00
Eric Nemchik 1f4892f00d Update default.conf.sample to deny dotfile access
Signed-off-by: Eric Nemchik <eric@nemchik.com>
2026-02-08 10:27:40 -06:00
LinuxServer-CI eed6caef67 Bot Updating Package Versions 2026-02-05 21:03:40 +00:00
LinuxServer-CI abf0cf271a Bot Updating Package Versions 2026-01-29 20:55:04 +00:00
LinuxServer-CI 0bfcb8d5a9 Bot Updating Package Versions 2026-01-27 11:57:26 +00:00
LinuxServer-CI fc68f42dc8 Bot Updating Package Versions 2026-01-22 09:57:15 +00:00
LinuxServer-CI 7c5766132f Bot Updating Package Versions 2026-01-13 16:58:49 +00:00
LinuxServer-CI 2dff9adc63 Bot Updating Package Versions 2026-01-13 09:51:20 +00:00
LinuxServer-CI 9393b12c8d Bot Updating Package Versions 2026-01-08 16:57:09 +00:00
LinuxServer-CI fa16614e69 Bot Updating Package Versions 2026-01-06 16:56:33 +00:00
LinuxServer-CI 77ed092e05 Bot Updating Package Versions 2026-01-06 11:52:52 +00:00
LinuxServer-CI ea5f835680 Bot Updating Package Versions 2025-12-23 11:52:15 +00:00
LinuxServer-CI effecf18e4 Bot Updating Package Versions 2025-12-16 11:53:03 +00:00
LinuxServer-CI 88106f48fc Bot Updating Package Versions 2025-12-09 11:51:52 +00:00
3 changed files with 134 additions and 108 deletions
+88 -85
View File
@@ -1,13 +1,13 @@
NAME VERSION TYPE
Process Wrapper 0.0.0.0 binary (+1 duplicate)
acl-libs 2.3.2-r1 apk
activity 5.0.0-dev.0 npm
activity 6.0.0-dev.0 npm
alpine-baselayout 3.7.0-r0 apk
alpine-baselayout-data 3.7.0-r0 apk
alpine-keys 2.5-r0 apk
alpine-release 3.22.2-r0 apk
alpine-release 3.22.3-r0 apk
alsa-lib 1.2.14-r0 apk
amphp/amp v2.6.4 php-composer
amphp/amp v2.6.5 php-composer
amphp/byte-stream v1.8.2 php-composer
amphp/parallel v1.4.4 php-composer
amphp/parser v1.1.1 php-composer
@@ -22,7 +22,7 @@ anstyle-query 1.0.2 rust-crate
anyhow 1.0.79 rust-crate
anyhow 1.0.98 rust-crate
aom-libs 3.12.1-r0 apk
apache2-utils 2.4.65-r0 apk
apache2-utils 2.4.66-r0 apk
apk-tools 2.14.9-r3 apk
apr 1.7.5-r0 apk
apr-util 1.6.3-r1 apk
@@ -32,8 +32,8 @@ arrayvec 0.7.4 rust-crate
av-metrics 0.9.1 rust-crate
av1-grain 0.2.3 rust-crate
aws/aws-crt-php v1.2.7 php-composer
aws/aws-sdk-php 3.349.3 php-composer
bamarni/composer-bin-plugin 1.8.2 php-composer
aws/aws-sdk-php 3.369.9 php-composer
bamarni/composer-bin-plugin 1.8.3 php-composer
bantu/ini-get-wrapper v1.0.1 php-composer
bash 5.2.37-r0 apk
bitflags 2.4.1 rust-crate
@@ -45,7 +45,7 @@ brick/math 0.12.1 php-composer
brotli-libs 1.1.0-r2 apk
busybox 1.37.0-r20 apk
busybox-binsh 1.37.0-r20 apk
c-ares 1.34.5-r0 apk
c-ares 1.34.6-r0 apk
c-client 2007f-r15 apk
ca-certificates 20250911-r0 apk
ca-certificates-bundle 20250911-r0 apk
@@ -59,7 +59,7 @@ clap_complete 4.4.6 rust-crate
clap_derive 4.4.7 rust-crate
clap_lex 0.6.0 rust-crate
colorchoice 1.0.0 rust-crate
composer 2.9.2 binary
composer 2.9.5 binary
console 0.15.8 rust-crate
coreutils 9.7-r1 apk
coreutils-env 9.7-r1 apk
@@ -78,7 +78,7 @@ cweagans/composer-patches 1.7.3 php-composer
dbus-libs 1.16.2-r1 apk
deepdiver/zipstreamer v2.0.3 php-composer
deepdiver1975/tarstreamer v2.1.0 php-composer
doctrine/dbal 3.10.2 php-composer
doctrine/dbal 3.10.4 php-composer
doctrine/deprecations 1.1.5 php-composer
doctrine/event-manager 2.0.1 php-composer
doctrine/lexer 3.0.1 php-composer
@@ -97,10 +97,10 @@ ffmpeg-libpostproc 6.1.2-r2 apk
ffmpeg-libswresample 6.1.2-r2 apk
ffmpeg-libswscale 6.1.2-r2 apk
fftw-double-libs 3.3.10-r6 apk
files_downloadlimit 5.0.0-dev.0 npm
files_pdfviewer 5.0.0-dev.0 npm
files_downloadlimit 5.1.0-dev.0 npm
files_pdfviewer 6.0.0-dev.0 npm
findutils 4.10.0-r0 apk
firstrunwizard 5.0.0-dev.0 npm
firstrunwizard 6.0.0-dev.0 npm
fontconfig 2.15.0-r3 apk
freetype 2.13.3-r0 apk
fribidi 1.0.16-r1 apk
@@ -109,7 +109,7 @@ fusonic/opengraph v3.0.0 php-composer
gdbm 1.24-r0 apk
getrandom 0.2.12 rust-crate
giflib 5.2.2-r1 apk
giggsey/libphonenumber-for-php-lite 9.0.17 php-composer
giggsey/libphonenumber-for-php-lite 9.0.9 php-composer
git 2.49.1-r0 apk
git-init-template 2.49.1-r0 apk
glib 2.84.4-r0 apk
@@ -119,16 +119,16 @@ gnu-libiconv 1.17-r2 apk
gnu-libiconv-libs 1.17-r2 apk
gnutls 3.8.8-r0 apk
graphite2 1.3.14-r6 apk
guzzlehttp/guzzle 7.9.3 php-composer
guzzlehttp/promises 2.2.0 php-composer
guzzlehttp/psr7 2.7.1 php-composer
guzzlehttp/guzzle 7.10.0 php-composer
guzzlehttp/promises 2.3.0 php-composer
guzzlehttp/psr7 2.8.0 php-composer
guzzlehttp/uri-template v1.0.4 php-composer
harfbuzz 11.2.1-r0 apk
heck 0.4.1 rust-crate
hexogen/kdtree v0.2.6 php-composer
hwdata-pci 0.395-r0 apk
icewind/searchdav v3.2.0 php-composer
icewind/smb v3.7.0 php-composer
icewind/smb 3.8.1 php-composer
icewind/streams v0.7.8 php-composer
icu-data-en 76.1-r1 apk
icu-libs 76.1-r1 apk
@@ -146,7 +146,7 @@ ivf 0.1.3 rust-crate
jansson 2.14.1-r0 apk
joomla/string 3.0.4 php-composer
jq 1.8.1-r0 apk
justinrainbow/json-schema 6.4.2 php-composer
justinrainbow/json-schema 6.6.4 php-composer
kornrunner/blurhash v1.2.2 php-composer
lab 0.11.0 rust-crate
lame-libs 3.100-r5 apk
@@ -170,7 +170,7 @@ libbz2 1.0.8-r6 apk
libc 0.2.155 rust-crate
libc 0.2.172 rust-crate
libcap2 2.76-r0 apk
libcrypto3 3.5.4-r0 apk
libcrypto3 3.5.5-r0 apk
libcurl 8.14.1-r2 apk
libdav1d 1.5.1-r0 apk
libdeflate 1.23-r0 apk
@@ -179,7 +179,7 @@ libdrm 2.4.124-r0 apk
libeconf 0.6.3-r0 apk
libedit 20250104.3.1-r1 apk
libevent 2.1.12-r8 apk
libexpat 2.7.3-r0 apk
libexpat 2.7.4-r0 apk
libffi 3.4.8-r0 apk
libflac 1.4.3-r1 apk
libformw 6.5_p20250503-r0 apk
@@ -202,7 +202,7 @@ libopenmpt 0.7.15-r0 apk
libpanelw 6.5_p20250503-r0 apk
libpciaccess 0.18.1-r0 apk
libplacebo 6.338.2-r3 apk
libpng 1.6.51-r0 apk
libpng 1.6.54-r0 apk
libpq 17.7-r0 apk
libproc2 4.0.4-r3 apk
libpsl 0.21.5-r3 apk
@@ -213,12 +213,12 @@ libsharpyuv 1.5.0-r0 apk
libsm 1.2.5-r0 apk
libsmbclient 4.21.9-r1 apk
libsndfile 1.2.2-r2 apk
libsodium 1.0.20-r0 apk
libsodium 1.0.20-r1 apk
libsrt 1.5.3-r1 apk
libssh 0.11.2-r0 apk
libssl3 3.5.4-r0 apk
libssl3 3.5.5-r0 apk
libstdc++ 14.2.0-r6 apk
libtasn1 4.20.0-r0 apk
libtasn1 4.21.0-r0 apk
libtheora 1.1.1-r18 apk
libunibreak 6.1-r0 apk
libunistring 1.3-r0 apk
@@ -249,7 +249,7 @@ linux-pam 1.7.0-r4 apk
linux-raw-sys 0.4.12 rust-crate
lmdb 0.9.33-r0 apk
log 0.4.20 rust-crate
logreader 5.0.0-dev.0 npm
logreader 6.0.0 npm
logrotate 3.21.0-r1 apk
lz4-libs 1.10.0-r0 apk
marc-mabe/php-enum v4.7.1 php-composer
@@ -261,23 +261,24 @@ mexitek/phpcolors v1.0.4 php-composer
microsoft/azure-storage-blob 1.5.4 php-composer
microsoft/azure-storage-common 1.5.2 php-composer
minimal-lexical 0.2.1 rust-crate
mlocati/ip-lib 1.20.0 php-composer
mlocati/ip-lib 1.22.0 php-composer
mpg123-libs 1.32.10-r0 apk
mtdowling/jmespath.php 2.8.0 php-composer
musl 1.2.5-r10 apk
musl-utils 1.2.5-r10 apk
nano 8.4-r0 apk
ncurses-terminfo-base 6.5_p20250503-r0 apk
nelexa/buffer 1.3.0 php-composer
netcat-openbsd 1.229.1-r0 apk
nettle 3.10.1-r0 apk
new_debug_unreachable 1.0.4 rust-crate
nextcloud 1.0.0 npm
nextcloud/lognormalizer v1.0.0 php-composer
nextcloud/lognormalizer v3.0.0 php-composer
nghttp2-libs 1.65.0-r0 apk
nginx 1.28.0-r3 apk
nginx 1.28.2-r0 apk
nom 7.1.3 rust-crate
noop_proc_macro 0.3.0 rust-crate
notifications 5.0.0-dev.0 npm
notifications 6.0.0-dev.0 npm
num-bigint 0.4.4 rust-crate
num-derive 0.4.1 rust-crate
num-integer 0.1.45 rust-crate
@@ -291,48 +292,48 @@ openexr-libiex 3.3.2-r0 apk
openexr-libilmthread 3.3.2-r0 apk
openexr-libopenexr 3.3.2-r0 apk
openexr-libopenexrcore 3.3.2-r0 apk
openssl 3.5.4-r0 apk
openssl 3.5.5-r0 apk
opus 1.5.2-r1 apk
orc 0.4.40-r1 apk
p11-kit 0.25.5-r2 apk
paragonie/constant_time_encoding v2.6.3 php-composer
password_policy 4.0.0-dev.0 npm
password_policy 5.0.0-dev.0 npm
paste 1.0.14 rust-crate
pcre2 10.46-r0 apk
pear/archive_tar 1.5.0 php-composer
pear/console_getopt v1.4.3 php-composer
pear/pear-core-minimal v1.10.16 php-composer
pear/pear_exception v1.0.2 php-composer
photos 5.0.0-dev.1 npm
photos 6.0.0-dev.0 npm
php-http/guzzle7-adapter 1.1.0 php-composer
php-http/httplug 2.4.1 php-composer
php-http/promise 1.3.1 php-composer
php-opencloud/openstack v3.14.0 php-composer
php84 8.4.14-r0 apk
php84-bcmath 8.4.14-r0 apk
php84-bz2 8.4.14-r0 apk
php84-common 8.4.14-r0 apk
php84-ctype 8.4.14-r0 apk
php84-curl 8.4.14-r0 apk
php84-dom 8.4.14-r0 apk
php84-exif 8.4.14-r0 apk
php84-fileinfo 8.4.14-r0 apk
php84-fpm 8.4.14-r0 apk
php84-ftp 8.4.14-r0 apk
php84-gd 8.4.14-r0 apk
php84-gmp 8.4.14-r0 apk
php84-iconv 8.4.14-r0 apk
php84-intl 8.4.14-r0 apk
php84-ldap 8.4.14-r0 apk
php84-mbstring 8.4.14-r0 apk
php84-mysqlnd 8.4.14-r0 apk
php84-opcache 8.4.14-r0 apk
php84-openssl 8.4.14-r0 apk
php84-pcntl 8.4.14-r0 apk
php84-pdo 8.4.14-r0 apk
php84-pdo_mysql 8.4.14-r0 apk
php84-pdo_pgsql 8.4.14-r0 apk
php84-pdo_sqlite 8.4.14-r0 apk
php84 8.4.16-r0 apk
php84-bcmath 8.4.16-r0 apk
php84-bz2 8.4.16-r0 apk
php84-common 8.4.16-r0 apk
php84-ctype 8.4.16-r0 apk
php84-curl 8.4.16-r0 apk
php84-dom 8.4.16-r0 apk
php84-exif 8.4.16-r0 apk
php84-fileinfo 8.4.16-r0 apk
php84-fpm 8.4.16-r0 apk
php84-ftp 8.4.16-r0 apk
php84-gd 8.4.16-r0 apk
php84-gmp 8.4.16-r0 apk
php84-iconv 8.4.16-r0 apk
php84-intl 8.4.16-r0 apk
php84-ldap 8.4.16-r0 apk
php84-mbstring 8.4.16-r0 apk
php84-mysqlnd 8.4.16-r0 apk
php84-opcache 8.4.16-r0 apk
php84-openssl 8.4.16-r0 apk
php84-pcntl 8.4.16-r0 apk
php84-pdo 8.4.16-r0 apk
php84-pdo_mysql 8.4.16-r0 apk
php84-pdo_pgsql 8.4.16-r0 apk
php84-pdo_sqlite 8.4.16-r0 apk
php84-pecl-apcu 5.1.27-r0 apk
php84-pecl-igbinary 3.2.16-r1 apk
php84-pecl-imagick 3.8.0-r1 apk
@@ -341,24 +342,24 @@ php84-pecl-memcached 3.3.0-r0 apk
php84-pecl-msgpack 3.0.0-r0 apk
php84-pecl-redis 6.3.0-r0 apk
php84-pecl-smbclient 1.2.0_pre-r0 apk
php84-pgsql 8.4.14-r0 apk
php84-phar 8.4.14-r0 apk
php84-posix 8.4.14-r0 apk
php84-session 8.4.14-r0 apk
php84-simplexml 8.4.14-r0 apk
php84-sockets 8.4.14-r0 apk
php84-sodium 8.4.14-r0 apk
php84-sqlite3 8.4.14-r0 apk
php84-sysvsem 8.4.14-r0 apk
php84-xml 8.4.14-r0 apk
php84-xmlreader 8.4.14-r0 apk
php84-xmlwriter 8.4.14-r0 apk
php84-zip 8.4.14-r0 apk
php84-pgsql 8.4.16-r0 apk
php84-phar 8.4.16-r0 apk
php84-posix 8.4.16-r0 apk
php84-session 8.4.16-r0 apk
php84-simplexml 8.4.16-r0 apk
php84-sockets 8.4.16-r0 apk
php84-sodium 8.4.16-r0 apk
php84-sqlite3 8.4.16-r0 apk
php84-sysvsem 8.4.16-r0 apk
php84-xml 8.4.16-r0 apk
php84-xmlreader 8.4.16-r0 apk
php84-xmlwriter 8.4.16-r0 apk
php84-zip 8.4.16-r0 apk
phpseclib/phpseclib 2.0.47 php-composer
pimple/pimple v3.5.0 php-composer
pimple/pimple v3.6.0 php-composer
popt 1.19-r4 apk
ppv-lite86 0.2.17 rust-crate
privacy 4.0.0-dev.0 npm
privacy 5.0.0-dev.0 npm
proc-macro2 1.0.76 rust-crate
procps-ng 4.0.4-r3 apk
profiling 1.0.13 rust-crate
@@ -383,9 +384,9 @@ rav1e-libs 0.7.1-r2 apk
rayon 1.8.0 rust-crate
rayon-core 1.12.0 rust-crate
readline 8.2.13-r1 apk
recommendations 5.0.0-dev.0 npm
recommendations 6.0.0-dev.0 npm
rsync 3.4.1-r1 apk
rubix/ml 2.5.2 php-composer
rubix/ml 2.5.3 php-composer
rubix/tensor 3.0.5 php-composer
rullzer/easytotp v0.1.4 php-composer
rustix 0.38.28 rust-crate
@@ -422,28 +423,29 @@ sratom 0.6.18-r0 apk
ssl_client 1.37.0-r20 apk
stecman/symfony-console-completion v0.14.0 php-composer
sudo 1.9.17_p2-r0 apk
support 4.0.0-dev.0 npm
support 5.0.0-dev.0 npm
symfony/console v6.4.17 php-composer
symfony/css-selector v6.4.13 php-composer
symfony/deprecation-contracts v3.6.0 php-composer (+1 duplicate)
symfony/dom-crawler v6.4.23 php-composer
symfony/event-dispatcher v6.4.8 php-composer
symfony/event-dispatcher-contracts v3.5.0 php-composer
symfony/filesystem v7.4.0 php-composer
symfony/http-foundation v6.4.29 php-composer
symfony/mailer v6.4.12 php-composer
symfony/mime v6.4.12 php-composer
symfony/polyfill-intl-grapheme v1.32.0 php-composer
symfony/polyfill-intl-idn v1.32.0 php-composer
symfony/polyfill-intl-normalizer v1.32.0 php-composer
symfony/polyfill-intl-normalizer v1.33.0 php-composer
symfony/polyfill-mbstring v1.31.0 php-composer
symfony/polyfill-php80 v1.31.0 php-composer
symfony/polyfill-php82 v1.31.0 php-composer
symfony/polyfill-php82 v1.32.0 php-composer
symfony/polyfill-php83 v1.31.0 php-composer
symfony/polyfill-php83 v1.32.0 php-composer
symfony/polyfill-php84 v1.32.0 php-composer
symfony/polyfill-php83 v1.33.0 php-composer
symfony/polyfill-php84 v1.33.0 php-composer (+1 duplicate)
symfony/polyfill-php85 v1.33.0 php-composer
symfony/polyfill-uuid v1.29.0 php-composer
symfony/process v6.4.15 php-composer
symfony/process v6.4.31 php-composer
symfony/routing v6.4.12 php-composer
symfony/service-contracts v3.5.1 php-composer
symfony/string v6.4.15 php-composer
@@ -454,15 +456,15 @@ syn 2.0.48 rust-crate
talloc 2.4.2-r1 apk
tap 1.0.1 rust-crate
tdb-libs 1.4.12-r0 apk
teams 32.0.0 npm
teams 33.0.0-dev.0 npm
terminal_size 0.3.0 rust-crate
tevent 0.16.1-r0 apk
text 6.0.0 npm
text 7.0.0-dev.1 npm
thiserror 1.0.56 rust-crate
thiserror-impl 1.0.56 rust-crate
tinyvec 1.9.0 rust-crate
twofactor_totp 14.0.0 npm
tzdata 2025b-r0 apk
twofactor_totp 15.0.0-dev.0 npm
tzdata 2025c-r0 apk
unicode-ident 1.0.12 rust-crate
unicode-width 0.1.11 rust-crate
utf8parse 0.2.1 rust-crate
@@ -470,13 +472,14 @@ utmps-libs 0.1.3.1-r0 apk
v4l-utils-libs 1.28.1-r1 apk
v_frame 0.3.7 rust-crate
vidstab 1.1.1-r0 apk
viewer 5.0.0-dev.0 npm
viewer 6.0.0-dev.0 npm
vulkan-loader 1.4.313.0-r0 apk
wamania/php-stemmer v4.0.0 php-composer
wapmorgan/mp3info 0.1.1 php-composer
wayland-libs-client 1.23.1-r3 apk
web-auth/cose-lib 4.3.0 php-composer
web-auth/webauthn-lib 4.9.1 php-composer
woltlab/webp-exif v0.1.2 php-composer
wyz 0.5.1 rust-crate
x264-libs 0.164.3108-r0 apk
x265-libs 3.6-r0 apk
+1
View File
@@ -144,6 +144,7 @@ init_diagram: |
"nextcloud:develop" <- Base Images
# changelog
changelogs:
- {date: "08.02.26:", desc: "Existing users should update: site-confs/default.conf - Deny access to all dotfiles."}
- {date: "10.07.25:", desc: "Rebase to Alpine 3.22."}
- {date: "12.02.25:", desc: "Rebase to Alpine 3.21."}
- {date: "09.01.25:", desc: "Fix uploading large files. Existing users should update their nginx confs."}
@@ -1,4 +1,4 @@
## Version 2025/07/10 - Changelog: https://github.com/linuxserver/docker-nextcloud/commits/master/root/defaults/nginx/site-confs/default.conf.sample
## Version 2026/05/05 - Changelog: https://github.com/linuxserver/docker-nextcloud/commits/master/root/defaults/nginx/site-confs/default.conf.sample
# Set the `immutable` cache control options only for assets with a cache busting `v` argument
map $arg_v $asset_immutable {
@@ -20,6 +20,13 @@ server {
root /app/www/public;
# deny access to all dotfiles
location ~ /\. {
access_log off;
log_not_found off;
return 404;
}
# display real ip in nginx logs when connected through reverse proxy via docker network
set_real_ip_from 172.16.0.0/12;
real_ip_header X-Forwarded-For;
@@ -49,12 +56,12 @@ server {
client_body_buffer_size 512k;
# HTTP response headers borrowed from Nextcloud `.htaccess`
add_header Referrer-Policy "no-referrer" always;
add_header X-Content-Type-Options "nosniff" always;
add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-Permitted-Cross-Domain-Policies "none" always;
add_header X-Robots-Tag "noindex, nofollow" always;
add_header X-XSS-Protection "1; mode=block" always;
add_header Referrer-Policy "no-referrer" always;
add_header X-Content-Type-Options "nosniff" always;
add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-Permitted-Cross-Domain-Policies "none" always;
add_header X-Robots-Tag "noindex, nofollow" always;
add_header X-XSS-Protection "1; mode=block" always;
# Remove X-Powered-By, which is an information leak
fastcgi_hide_header X-Powered-By;
@@ -92,11 +99,19 @@ server {
# The rules in this block are an adaptation of the rules
# in `.htaccess` that concern `/.well-known`.
location = /.well-known/carddav { return 301 /remote.php/dav/; }
location = /.well-known/caldav { return 301 /remote.php/dav/; }
location = /.well-known/carddav {
return 301 /remote.php/dav/;
}
location = /.well-known/caldav {
return 301 /remote.php/dav/;
}
location /.well-known/acme-challenge { try_files $uri $uri/ =404; }
location /.well-known/pki-validation { try_files $uri $uri/ =404; }
location /.well-known/acme-challenge {
try_files $uri $uri/ =404;
}
location /.well-known/pki-validation {
try_files $uri $uri/ =404;
}
# Let Nextcloud's API for `/.well-known` URIs handle all other
# requests by passing them to the front-end controller.
@@ -104,8 +119,12 @@ server {
}
# Rules borrowed from `.htaccess` to hide certain paths from clients
location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)(?:$|/) { return 404; }
location ~ ^/(?:\.|autotest|occ|issue|indie|db_|console) { return 404; }
location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)(?:$|/) {
return 404;
}
location ~ ^/(?:\.|autotest|occ|issue|indie|db_|console) {
return 404;
}
# Ensure this block, which passes PHP files to the PHP process, is above the blocks
# which handle static assets (as seen below). If this block is not declared first,
@@ -124,8 +143,8 @@ server {
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PATH_INFO $path_info;
fastcgi_param modHeadersAvailable true; # Avoid sending the security headers twice
fastcgi_param front_controller_active true; # Enable pretty urls
fastcgi_param modHeadersAvailable true; # Avoid sending the security headers twice
fastcgi_param front_controller_active true; # Enable pretty urls
fastcgi_pass 127.0.0.1:9000;
fastcgi_intercept_errors on;
@@ -138,7 +157,7 @@ server {
location ~ \.(?:css|js|mjs|svg|gif|png|jpg|ico|wasm|tflite|map|ogg|flac)$ {
try_files $uri /index.php$request_uri;
add_header Cache-Control "public, max-age=15778463, $asset_immutable";
access_log off; # Optional: Don't log access to assets
access_log off; # Optional: Don't log access to assets
location ~ \.wasm$ {
default_type application/wasm;
@@ -148,8 +167,8 @@ server {
location ~ \.woff2?$ {
try_files $uri /index.php$request_uri;
expires 7d; # Cache-Control policy borrowed from `.htaccess`
access_log off; # Optional: Don't log access to assets
expires 7d; # Cache-Control policy borrowed from `.htaccess`
access_log off; # Optional: Don't log access to assets
}
# Rule borrowed from `.htaccess`
@@ -157,6 +176,14 @@ server {
return 301 /remote.php$request_uri;
}
# Support for the Client Push (notify_push) plugin, needs mod installed https://github.com/linuxserver/docker-mods/tree/nextcloud-notify-push
location ^~ /push/ {
proxy_pass http://127.0.0.1:7867/;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "Upgrade";
}
location / {
# enable for basic auth
#auth_basic "Restricted";
@@ -164,9 +191,4 @@ server {
try_files $uri $uri/ /index.php$request_uri;
}
# deny access to .htaccess/.htpasswd files
location ~ /\.ht {
deny all;
}
}