Nextcloud fix security issues. #72

Open
opened 2025-01-23 19:26:25 +01:00 by kalipso · 5 comments
Owner

image

![image](/attachments/e09ba889-994e-4503-a931-0ef933cf801c)
139 KiB
kalipso added this to the Make nextcloud useable project 2025-01-23 19:26:34 +01:00
kalipso added the Servicenextcloud labels 2025-01-23 19:26:40 +01:00
Owner

grafik Only some warnings left

<img width="1373" alt="grafik" src="attachments/d9d7b331-8c90-4909-b00c-e681f222f78d"> Only some warnings left
Author
Owner

I would take care of mimetipes and maybe header warnings the coming days, but would not consider this a blocker anymore

I would take care of mimetipes and maybe header warnings the coming days, but would not consider this a blocker anymore
Owner
grafik.png Curent state:
<img width="715" alt="grafik.png" src="attachments/c792e962-acf0-417a-b59f-6ec806050f48"> Curent state:
133 KiB
Author
Owner

Mmh is the HTTPS warning new?
HAProxy should fix this for sure.

Mmh is the HTTPS warning new? HAProxy should fix this for sure.
Author
Owner

This might be fixed by setting trusted_proxies = [ hosts.malobeo.hosts.fanny.network.address ]; to [ "127.0.0.1" "::1" ] (according to this ticket).

For this to work we need to make sure nginx is also running within the VM i think.

This might be fixed by setting `trusted_proxies = [ hosts.malobeo.hosts.fanny.network.address ];` to `[ "127.0.0.1" "::1" ]` (according to this [ticket](https://git.dynamicdiscord.de/malobeo/infrastructure/issues/72#issuecomment-828)). For this to work we need to make sure nginx is also running within the VM i think.
Sign in to join this conversation.
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: malobeo/infrastructure#72