After migrating to 11.2 and configuring nginx to work with certificates and my domain, the admin control panel is complaining about several security and performance settings. Are any of these intentionally different from how Nextcloud recommends or is it left as an exercise for the admin to finish securing the server?
-
Important Announcement for the TrueNAS Community.
The TrueNAS Community has now been moved. This forum will now become READ-ONLY for historical purposes. Please feel free to join us on the new TrueNAS Community Forums
Nextcloud plugin security on FreeNAS 11.2
- Thread starter ShutUpFry
- Start date
adrianwi
Guru
- Joined
- Oct 15, 2013
- Messages
- 1,231
What do you get if you run our security scan ↗
If you get an A and it's just HTTP header warnings I wouldn't worry too much, although you can probably play around with your nginx.conf file to resolve them.
If you get an A and it's just HTTP header warnings I wouldn't worry too much, although you can probably play around with your nginx.conf file to resolve them.
The security scan came back well, but like I mentioned the default configuration still gives some warnings about security and performance. Most of it was pretty easy to resolve with google. The only one I've still got left is php not having access to environment variables.
Similar threads
