[SOLVED] Referrer-Policy and Content-Security-Policy broken on Nginx-only setup

[j-ed]

Have you already asked aunt G.? I found the following matches for your request:

https://docs.nextcloud.com/server/15/admin_manual/installation/nginx.html

The "Referrer-Policy" HTTP header is not set to "no-referrer"

The “Referrer-Policy” HTTP header is not set to “no-referrer”, “no-referrer-when-downgrade”, “strict-origin” or “strict-origin-when-cross-origin”. This can leak referer information. There is a link to the documentation but no instructions on how to fix it. Does anyone know which file and where to add the lines: server { # Configuration add_header Referrer-Policy no-referrer always; } My first post and I apologise if I’ve left out any details. Nextcloud version 14.0.0 Ubuntu Server …