Improve security of Nextcloud installation

artis3n / nextcloud-ansible

Ansible deployment of a Nextcloud server. (This mostly works, I need to return to this and polish it.)

MIT License

5 stars 0 forks source link

Open artis3n opened 6 years ago

artis3n commented 6 years ago

The following items are found in the below picture:

[ ] Add 404 and 5xx error pages to signature.json to fix code integrity error
[ ] Fix .htaccess file to prevent data directory from being directly accessible from the internet
[ ] Add XSS protection headers to Nginx config
[ ] Add Clickjacking protection headers to Nginx config
[x] Always serve the site over HTTPS - either through Let's Encrypt or self-signed cert
[ ] Fix PHP OPcache settings

artis3n commented 6 years ago

XSS and Clickjacking headers are in nginx.conf, however Nextcloud is reading that those headers are not set. That needs to be investigated.

artis3n commented 6 years ago

PHP OPCache is set, but is not being picked up by Nextcloud.

artis3n commented 6 years ago