nextcloud/apache_secure_data
Andrej Semen 8c7990a768 Accepting request 415038 from home:asemen
- enable HSTS to prevent the warning "The Strict-Transport-Security
  HTTP header is not configured" in admin-page
- turn maintenance:mode off after upgrade

OBS-URL: https://build.opensuse.org/request/show/415038
OBS-URL: https://build.opensuse.org/package/show/server:php:applications/nextcloud?expand=0&rev=2
2016-07-25 11:45:04 +00:00

22 lines
492 B
Plaintext

Alias /nextcloud "@DATAPATH@/"
<Directory "@DATAPATH@">
Options +FollowSymLinks
AllowOverride All
<IfModule mod_dav.c>
Dav off
</IfModule>
<IfModule mod_headers.c>
Header always set Strict-Transport-Security "max-age=15768000; includeSubDomains; preload"
</IfModule>
SetEnv HOME @DATAPATH@
SetEnv HTTP_HOME @DATAPATH@
</Directory>
<Directory "@DATAPATH@/data/">
# just in case if .htaccess gets disabled
Require all denied
</Directory>