I want to fix this and get A+ on security scan. NC version 13.0.2

I made these changes but still with score A on security scan. Anyways, I will leave as it is (in default dir /var/www/html/nextcloud).

[image] Security Scan: __Host-Prefix ℹ️ Support Okay … I had an alias in my apache2 configuration due an migration from the past … #Alias /owncloud "/var/www/html/owncloud/" #Alias /nextcloud "/var/www/html/owncloud/" After I commented this out … everything is fine A+ su…

Right, so what file I need to edit exactly inside /etc/apache2 ? It’s the /etc/apache2/sites-enabled/nextcloud.conf ?

That totally depends on your system/ installation and I don’t know nothing about, except the fact that it’s NC 13.0.2 :wink: So, if nextcloud.conf is the only file in that directory, then it is definitely this file where you need to apply the changes :wink:

/etc/apache2/sites-enabled/ ├── 000-default.conf -> …/sites-available/000-default.conf └── nextcloud.conf -> …/sites-available/nextcloud.conf Debian Stretch PHP 7.0.27 SQLite 3.16.2 Apache 2.4.25 NC dir /var/www/html/nextcloud

Any of my files haven’t an alias configured inside to comment out. Any other tips?

You should have a config file /etc/apache2/sites-available/nextcloud.conf that is the actual config file. The files in sites-enabled are symbolic links to that directory. Check that this is the case. To start over, what is your exact problem? What does the security scan tell?

[image] eehmke: You should have a config file /etc/apache2/sites-available/nextcloud.conf that is the actual config file. The files in sites-enabled are symbolic links to that directory. Check that this is the case. To start over, what is your exact problem? What does the security scan tell…

https://help.nextcloud.com/t/security—host-prefix-cookie-setting/9740

Content of /etc/apache2/sites-available/nextcloud.conf file: <IfModule mod_ssl.c> <VirtualHost _default_:443> ServerAdmin <hidden-for-security-purposes> ServerName <hidden-for-security-purposes> DocumentRoot /var/www/html <Directory /var/www/html/> Options +FollowSym…

And is your nextcloud installation directly inside [image] wagner4362: /var/www/html/ or is it a subfolder like /var/www/html/nextcloud? I have my nextcloud installed in /var/www/nextcloud, and DocumentRoot and Directory point to that directory. Does your URL look like cloud.domain.com or l…

Security: "__Host-Prefix", how to fix?

ℹ️ Support

Schmu April 27, 2018, 6:57am 2