nextcloud: Resolve "detected issues" #47

Closed
opened 2021-05-17 01:26:56 +01:00 by tlater · 3 comments
Owner

List is as follows:

  • The reverse proxy header configuration is incorrect, or you are accessing Nextcloud from a trusted proxy. If not, this is a security issue and can allow an attacker to spoof their IP address as visible to the Nextcloud. Further information can be found in the documentation.
    • Seems we need to set TRUSTED_PROXIES in the container, and possibly change config
  • Your web server is not properly set up to resolve "/.well-known/(webfinger|nodeinfo|caldav|carddav)". Further information can be found in the documentation.
  • Your installation has no default phone region set. This is required to validate phone numbers in the profile settings without a country code. To allow numbers without a country code, please add "default_phone_region" with the respective ISO 3166-1 code ↗ of the region to your config file.
    • Check docker image config on how to fix that.
  • Module php-imagick in this instance has no SVG support. For better compatibility it is recommended to install it.
    • Aw :( Need to maybe add this to the upstream docker image?
List is as follows: - [x] The reverse proxy header configuration is incorrect, or you are accessing Nextcloud from a trusted proxy. If not, this is a security issue and can allow an attacker to spoof their IP address as visible to the Nextcloud. Further information can be found in the [documentation](https://docs.nextcloud.com/server/21/admin_manual/configuration_server/reverse_proxy_configuration.html). - Seems we need to set TRUSTED_PROXIES in the container, and possibly change config - [ ] Your web server is not properly set up to resolve "/.well-known/(webfinger|nodeinfo|caldav|carddav)". Further information can be found in the documentation. - This has been bugging me for a while [as it should work](https://gitea.tlater.net/tlaternet/tlaternet-server/src/branch/master/configuration/services/configs/nginx-nextcloud.conf#L80). - [x] Your installation has no default phone region set. This is required to validate phone numbers in the profile settings without a country code. To allow numbers without a country code, please add "default_phone_region" with the respective ISO 3166-1 code ↗ of the region to your config file. - Check docker image config on how to fix that. - [x] Module php-imagick in this instance has no SVG support. For better compatibility it is recommended to install it. - Aw :( Need to maybe add this to the upstream docker image?
Author
Owner
For the third point, see https://github.com/nextcloud/docker/issues/1544
Author
Owner
For the fourth point, see https://github.com/nextcloud/docker/issues/1414
Author
Owner

Resolved in #58

Resolved in #58
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: tlaternet/tlaternet-server#47
No description provided.