Problems with "nosniff" and "SAMEORIGIN"

Hello there!

I can’t get rid off the following two security warnings in my admin center:

„X-Content-Type-Options“-HTTP-Header
-> is not “nosniff”

„X-Frame-Options“-HTTP-Header
-> is not “SAMEORIGIN”

I did try to fix it already with the nextcloud guide, but I can’t do it… Maybe it has to do with the guide I followed to install nextcloud? Could anyone be kind and watch into the guide I used and give me a hint why I get those messages?

Guides I used to install nextcloud:

  1. creating self-signed SSL Certificate
  2. Install and Config nextcloud

I would be really thankful for some advice, I tried a lot but I can’t fix it…

Kind regards.