diff --git a/apache_secure_data b/apache_secure_data
index 8b5fbf7..c73e8be 100644
--- a/apache_secure_data
+++ b/apache_secure_data
@@ -20,3 +20,6 @@ Alias /nextcloud "@DATAPATH@/"
   # just in case if .htaccess gets disabled
   Require all denied
 </Directory>
+
+Redirect 301 /.well-known/carddav /nextcloud/remote.php/dav
+Redirect 301 /.well-known/caldav /nextcloud/remote.php/dav
diff --git a/nextcloud.changes b/nextcloud.changes
index 9f06a5f..f1b9839 100644
--- a/nextcloud.changes
+++ b/nextcloud.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Tue Nov 27 22:51:28 UTC 2018 - ecsos@opensuse.org
+
+- Fix warning for /.well-known/{caldav,carddav} in overview 
+  security & setup warning.
+
 -------------------------------------------------------------------
 Thu Nov 22 16:56:26 UTC 2018 - ecsos@opensuse.org