Sync problem with NC 26.0.1.1 and php 8.1

I have a problem, I can’t sync client-server. I can’t understand why and where is the error.
I can create (upload) a file, but, if I delete it, i can see on the server and on the web interface.
If i delete from the web, I can see it again in the same position.

desktop
here the file in the NC folder to sync (with error)


here some files in NC web interface after some tests (rename and copy)


here what is in the server via ftp

Nextcloud version (eg, 20.0.5): 26.0.1
Operating system and version (eg, Ubuntu 20.04): Plesk on CentOS 7
Apache or nginx version (eg, Apache 2.4.25): nginx
PHP version (eg, 7.4): 8.1

The output of your Nextcloud log in Admin > Logging:

[settings] Avviso: Controller OCA\Settings\Controller\CheckSetupController::check executed 3988 queries.

GET /index.php/settings/ajax/checksetup
from x.x.x.x by eugenio at 2023-04-20T19:52:50+00:00

-

[core] Errore: Can't get app storage, app files_external, user not logged in

at 2023-04-20T19:51:08+00:00

-

[provisioning_api] Avviso: Controller OCA\Provisioning_API\Controller\UsersController::getUsersDetails executed 164 queries.

GET /ocs/v2.php/cloud/users/details?offset=0&limit=25&search=
from x.x.x.x by eugenio at 2023-04-20T19:35:07+00:00

The output of your config.php file in /path/to/nextcloud (make sure you remove any identifiable information!):

<?php
$CONFIG = array (
  'passwordsalt' => '--/',
  'secret' => '--',
  'trusted_domains' => 
  array (
    0 => 'localhost',
    1 => '--',
  ),
  'datadirectory' => '/var/www/vhosts/--/.nextcloud/data/17fde552688e',
  'dbtype' => 'mysql',
  'version' => '26.0.1.1',
  'overwrite.cli.url' => 'https://cloud.--.--',
  'dbname' => 'nextcloud20',
  'dbhost' => '127.0.0.1',
  'dbport' => '3306',
  'dbtableprefix' => 'oc_',
  'dbuser' => 'nextcloud20',
  'dbpassword' => '--',
  'installed' => true,
  'instanceid' => '--',
  'maintenance' => false,
  'config_is_read_only' => false,
  'mysql.utf8mb4' => true,
  'debug' => 'false',
  'loglevel' => 2,
  'theme' => '',
  'default_phone_region' => 'IT',
  'app_install_overwrite' => 
  array (
    0 => 'occweb',
    1 => 'documentserver_community',
  ),
  'updater.secret' => '--',
);

The output of your Apache/nginx/system log in /var/log/____:

2023-04-20 22:00:14	Error	x.x.x.x	404	GET /remote.php/dav/avatars/eugenio/128.png HTTP/1.0		Mozilla/5.0 (Macintosh) mirall/3.4.4git (build 9585) (Nextcloud, osx-17.7.0 ClientArchitecture: x86_64 OsArchitecture: x86_64)	14.7 K	Accesso SSL/TLS Apache
2023-04-20 22:00:14	Error	x.x.x.x		AH01797: client denied by server configuration: /var/www/vhosts/--.--/cloud.--.--/remote.php				Errore di Apache

PASTE HERE


Output errors in nextcloud.log in /var/www/ or as admin user in top right menu, filtering for errors. Use a pastebin service if necessary.

PASTE HERE

Some other tests…

I tried disabling all headers or any other spec on php, running occ files:scan --all or for each user, maintenance and so on, but the logs remain the same:

web hosting log:

nextcloud log


{"reqId":"cgZQjGYXZtMuq9UkHZks","level":2,"time":"2023-04-20T17:06:32+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"y0OeCEad6G0s1H5gLTEl","level":3,"time":"2023-04-20T17:10:41+00:00","remoteAddr":"","user":"--","app":"core","method":"","url":"--","message":"Can't get app storage, app files_external, user not logged in","userAgent":"--","version":"26.0.1.1","data":{"app":"core"}}
{"reqId":"y0OeCEad6G0s1H5gLTEl","level":3,"time":"2023-04-20T17:10:41+00:00","remoteAddr":"","user":"--","app":"core","method":"","url":"--","message":"Can't get app storage, app files_external, user not logged in","userAgent":"--","version":"26.0.1.1","data":{"app":"core"}}
{"reqId":"FkHTwQiVKSeHbbkh0OmR","level":2,"time":"2023-04-20T17:15:51+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"y0OeCEad6G0s1H5gLTEl","level":3,"time":"2023-04-20T17:21:23+00:00","remoteAddr":"","user":"--","app":"core","method":"","url":"--","message":"Can't get app storage, app files_external, user not logged in","userAgent":"--","version":"26.0.1.1","data":{"app":"core"}}
{"reqId":"y0OeCEad6G0s1H5gLTEl","level":3,"time":"2023-04-20T17:21:23+00:00","remoteAddr":"","user":"--","app":"core","method":"","url":"--","message":"Can't get app storage, app files_external, user not logged in","userAgent":"--","version":"26.0.1.1","data":{"app":"core"}}
{"reqId":"jh6EErlE26fko6j4lzrx","level":2,"time":"2023-04-20T17:22:55+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"6Vvg73jRpKDvkysmIcNM","level":2,"time":"2023-04-20T17:23:07+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"beQUw7Z2dqqZy0cNUFFj","level":2,"time":"2023-04-20T17:24:30+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"y0OeCEad6G0s1H5gLTEl","level":3,"time":"2023-04-20T17:32:12+00:00","remoteAddr":"","user":"--","app":"core","method":"","url":"--","message":"Can't get app storage, app files_external, user not logged in","userAgent":"--","version":"26.0.1.1","data":{"app":"core"}}
{"reqId":"y0OeCEad6G0s1H5gLTEl","level":3,"time":"2023-04-20T17:32:13+00:00","remoteAddr":"","user":"--","app":"core","method":"","url":"--","message":"Can't get app storage, app files_external, user not logged in","userAgent":"--","version":"26.0.1.1","data":{"app":"core"}}
{"reqId":"f3PKoun22VWuxXmx859S","level":2,"time":"2023-04-20T17:33:19+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"asXheUHHvvO9iuTjxf0S","level":2,"time":"2023-04-20T17:33:28+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"EvMEb9iL4omZn5jgeGT3","level":2,"time":"2023-04-20T17:34:15+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"aT88DNeXDuOZHxKXtYl8","level":2,"time":"2023-04-20T17:34:27+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"7IIHaXBYvEjsvYx4cQuC","level":2,"time":"2023-04-20T17:34:38+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"N2Ij9xfzpm62Heyi18p8","level":2,"time":"2023-04-20T17:35:40+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"JVVE7lOzenlQQ8k7r3Hc","level":2,"time":"2023-04-20T17:35:46+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"XbQgXHrU6z5K4Ruwkg8F","level":2,"time":"2023-04-20T17:35:52+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"ixrC6JZwiZylVozeTWvX","level":2,"time":"2023-04-20T17:37:34+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"Pv9YGjsSbY4HxiL2b8Ha","level":2,"time":"2023-04-20T17:37:39+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"TJ5uWXKf5g2sobNnbnpq","level":2,"time":"2023-04-20T17:37:45+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"T9aI4JBsefoavxLgiTMU","level":2,"time":"2023-04-20T17:38:03+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"zbStYNQEYWRj6KoY07pz","level":2,"time":"2023-04-20T17:40:42+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"Uun3gghceK7DuV8c25DG","level":2,"time":"2023-04-20T17:40:47+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"y0OeCEad6G0s1H5gLTEl","level":3,"time":"2023-04-20T17:42:52+00:00","remoteAddr":"","user":"--","app":"core","method":"","url":"--","message":"Can't get app storage, app files_external, user not logged in","userAgent":"--","version":"26.0.1.1","data":{"app":"core"}}
{"reqId":"y0OeCEad6G0s1H5gLTEl","level":3,"time":"2023-04-20T17:42:52+00:00","remoteAddr":"","user":"--","app":"core","method":"","url":"--","message":"Can't get app storage, app files_external, user not logged in","userAgent":"--","version":"26.0.1.1","data":{"app":"core"}}
{"reqId":"OXvbGtAZp3wxyQVargte","level":2,"time":"2023-04-20T17:47:19+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"FG51hnkEDu5g8hWLb2Xy","level":2,"time":"2023-04-20T17:47:30+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"Okkx4qLS5LyPykjE2OXW","level":2,"time":"2023-04-20T17:47:55+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"kcncS2IX77YxTrlsh4D4","level":2,"time":"2023-04-20T17:48:14+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"KLHqtLVVMNx2voPNCn8i","level":2,"time":"2023-04-20T17:51:18+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"y0OeCEad6G0s1H5gLTEl","level":3,"time":"2023-04-20T17:53:26+00:00","remoteAddr":"","user":"--","app":"core","method":"","url":"--","message":"Can't get app storage, app files_external, user not logged in","userAgent":"--","version":"26.0.1.1","data":{"app":"core"}}
{"reqId":"y0OeCEad6G0s1H5gLTEl","level":3,"time":"2023-04-20T17:53:27+00:00","remoteAddr":"","user":"--","app":"core","method":"","url":"--","message":"Can't get app storage, app files_external, user not logged in","userAgent":"--","version":"26.0.1.1","data":{"app":"core"}}
{"reqId":"8juMNsqFHlxiOFGDz6yM","level":2,"time":"2023-04-20T17:57:15+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"rOE3U9Gon57hr64oBWJU","level":2,"time":"2023-04-20T17:57:53+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"1iPfxopOA8kTOuIjNcef","level":3,"time":"2023-04-20T18:04:12+00:00","remoteAddr":"X.X.X.X","user":"--","app":"PHP","method":"GET","url":"/ocs/v1.php/cloud/capabilities?format=json","message":"session_start(): Ignoring session_start() because a session is already active at /var/www/vhosts/xxx.xxx/cloud.xxx.xxx/lib/private/Session/Internal.php#219","userAgent":"Mozilla/5.0 (Macintosh) mirall/3.8.0git (build 14589) (Nextcloud, osx-22.2.0 ClientArchitecture: x86_64 OsArchitecture: x86_64)","version":"26.0.1.1","data":{"app":"PHP"}}
{"reqId":"g8QTYd8GawfbiNplEeVa","level":3,"time":"2023-04-20T18:04:13+00:00","remoteAddr":"X.X.X.X","user":"--","app":"PHP","method":"GET","url":"/ocs/v2.php/apps/user_status/api/v1/user_status?format=json","message":"session_start(): Ignoring session_start() because a session is already active at /var/www/vhosts/xxx.xxx/cloud.xxx.xxx/lib/private/Session/Internal.php#219","userAgent":"Mozilla/5.0 (Macintosh) mirall/3.8.0git (build 14589) (Nextcloud, osx-22.2.0 ClientArchitecture: x86_64 OsArchitecture: x86_64)","version":"26.0.1.1","data":{"app":"PHP"}}
{"reqId":"ZL4YdnAkfdCNKOZmMqxW","level":2,"time":"2023-04-20T19:24:29+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"urjzyDFtqRmwK0IDxF9i","level":2,"time":"2023-04-20T19:25:59+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"H70CQOyXBFbVQoQQyV9e","level":3,"time":"2023-04-20T19:27:42+00:00","remoteAddr":"","user":"--","app":"core","method":"","url":"--","message":"Can't get app storage, app files_external, user not logged in","userAgent":"--","version":"26.0.1.1","data":{"app":"core"}}
{"reqId":"H70CQOyXBFbVQoQQyV9e","level":3,"time":"2023-04-20T19:27:42+00:00","remoteAddr":"","user":"--","app":"core","method":"","url":"--","message":"Can't get app storage, app files_external, user not logged in","userAgent":"--","version":"26.0.1.1","data":{"app":"core"}}
{"reqId":"CGPxc1UljYteCDb26yh5","level":2,"time":"2023-04-20T19:29:49+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"activity","method":"GET","url":"/ocs/v2.php/apps/activity/api/v2/activity?previews=true&since=0&limit=50&format=json","message":"Controller OCA\\Activity\\Controller\\APIv2Controller::getDefault executed 245 queries.","userAgent":"Mozilla/5.0 (Macintosh) mirall/3.8.0git (build 14589) (Nextcloud, osx-22.2.0 ClientArchitecture: x86_64 OsArchitecture: x86_64)","version":"26.0.1.1","data":{"app":"activity"}}
{"reqId":"eVVXSQaPB1nVnvQ8qk9n","level":3,"time":"2023-04-20T19:30:27+00:00","remoteAddr":"X.X.X.X","user":"--","app":"PHP","method":"GET","url":"/ocs/v1.php/cloud/capabilities?format=json","message":"session_start(): Ignoring session_start() because a session is already active at /var/www/vhosts/xxx.xxx/cloud.xxx.xxx/lib/private/Session/Internal.php#219","userAgent":"Mozilla/5.0 (Macintosh) mirall/3.8.1git (build 14890) (Nextcloud, osx-22.2.0 ClientArchitecture: x86_64 OsArchitecture: x86_64)","version":"26.0.1.1","data":{"app":"PHP"}}
{"reqId":"uUMWsg2Oc49wSqxfrdJw","level":3,"time":"2023-04-20T19:30:28+00:00","remoteAddr":"X.X.X.X","user":"--","app":"PHP","method":"GET","url":"/ocs/v2.php/apps/user_status/api/v1/user_status?format=json","message":"session_start(): Ignoring session_start() because a session is already active at /var/www/vhosts/xxx.xxx/cloud.xxx.xxx/lib/private/Session/Internal.php#219","userAgent":"Mozilla/5.0 (Macintosh) mirall/3.8.1git (build 14890) (Nextcloud, osx-22.2.0 ClientArchitecture: x86_64 OsArchitecture: x86_64)","version":"26.0.1.1","data":{"app":"PHP"}}
{"reqId":"HtPrZ6I7N8QutwIHYH29","level":2,"time":"2023-04-20T19:30:29+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"activity","method":"GET","url":"/ocs/v2.php/apps/activity/api/v2/activity?previews=true&since=0&limit=50&format=json","message":"Controller OCA\\Activity\\Controller\\APIv2Controller::getDefault executed 245 queries.","userAgent":"Mozilla/5.0 (Macintosh) mirall/3.8.1git (build 14890) (Nextcloud, osx-22.2.0 ClientArchitecture: x86_64 OsArchitecture: x86_64)","version":"26.0.1.1","data":{"app":"activity"}}
{"reqId":"xwRS424fYwJA1PGiHVQD","level":2,"time":"2023-04-20T19:33:25+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"provisioning_api","method":"GET","url":"/ocs/v2.php/cloud/users/details?offset=0&limit=25&search=","message":"Controller OCA\\Provisioning_API\\Controller\\UsersController::getUsersDetails executed 164 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"provisioning_api"}}
{"reqId":"XfXqRBl99rpGfUKcbnpi","level":2,"time":"2023-04-20T19:35:07+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"provisioning_api","method":"GET","url":"/ocs/v2.php/cloud/users/details?offset=0&limit=25&search=","message":"Controller OCA\\Provisioning_API\\Controller\\UsersController::getUsersDetails executed 164 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"provisioning_api"}}
{"reqId":"xiKlr1eFal6QJ0MoZ2bP","level":3,"time":"2023-04-20T19:39:49+00:00","remoteAddr":"","user":"--","app":"core","method":"","url":"--","message":"Can't get app storage, app files_external, user not logged in","userAgent":"--","version":"26.0.1.1","data":{"app":"core"}}
{"reqId":"xiKlr1eFal6QJ0MoZ2bP","level":3,"time":"2023-04-20T19:39:49+00:00","remoteAddr":"","user":"--","app":"core","method":"","url":"--","message":"Can't get app storage, app files_external, user not logged in","userAgent":"--","version":"26.0.1.1","data":{"app":"core"}}
{"reqId":"8l5IiPXVqY0oyV49L5OA","level":2,"time":"2023-04-20T19:44:00+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"Cdg5DKpqN8vOEXSJbURk","level":2,"time":"2023-04-20T19:45:53+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"97ZQvhG5Ok4takg19iRh","level":2,"time":"2023-04-20T19:49:55+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"mdPaOSo8wZDjHRln2taT","level":3,"time":"2023-04-20T19:50:36+00:00","remoteAddr":"","user":"--","app":"core","method":"","url":"--","message":"Can't get app storage, app files_external, user not logged in","userAgent":"--","version":"26.0.1.1","data":{"app":"core"}}
{"reqId":"mdPaOSo8wZDjHRln2taT","level":3,"time":"2023-04-20T19:50:37+00:00","remoteAddr":"","user":"--","app":"core","method":"","url":"--","message":"Can't get app storage, app files_external, user not logged in","userAgent":"--","version":"26.0.1.1","data":{"app":"core"}}
{"reqId":"1TNwmFXgRglIod2DSvKH","level":3,"time":"2023-04-20T19:51:08+00:00","remoteAddr":"","user":"--","app":"core","method":"","url":"--","message":"Can't get app storage, app files_external, user not logged in","userAgent":"--","version":"26.0.1.1","data":{"app":"core"}}
{"reqId":"1TNwmFXgRglIod2DSvKH","level":3,"time":"2023-04-20T19:51:08+00:00","remoteAddr":"","user":"--","app":"core","method":"","url":"--","message":"Can't get app storage, app files_external, user not logged in","userAgent":"--","version":"26.0.1.1","data":{"app":"core"}}
{"reqId":"8OwY3EvnerYxC1jaZ8Xy","level":2,"time":"2023-04-20T19:52:50+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"CuvIX4wOauard5pPImHy","level":3,"time":"2023-04-20T20:05:22+00:00","remoteAddr":"","user":"--","app":"core","method":"","url":"--","message":"Can't get app storage, app files_external, user not logged in","userAgent":"--","version":"26.0.1.1","data":{"app":"core"}}
{"reqId":"CuvIX4wOauard5pPImHy","level":3,"time":"2023-04-20T20:05:23+00:00","remoteAddr":"","user":"--","app":"core","method":"","url":"--","message":"Can't get app storage, app files_external, user not logged in","userAgent":"--","version":"26.0.1.1","data":{"app":"core"}}
{"reqId":"u6eSXhUvbBxBDwDzgVeN","level":2,"time":"2023-04-20T20:09:47+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"k4dgiPLh0AvDp21cYlFA","level":2,"time":"2023-04-20T20:09:54+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"r6zvsQAxxD4vhLYXZxsu","level":2,"time":"2023-04-20T20:10:02+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"4Rb1JfFpg7Qd3HdMOLyF","level":2,"time":"2023-04-20T20:31:38+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"vcpowqHtbIKUVW1g0rR1","level":2,"time":"2023-04-20T20:44:05+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"provisioning_api","method":"GET","url":"/ocs/v2.php/cloud/users/details?offset=0&limit=25&search=","message":"Controller OCA\\Provisioning_API\\Controller\\UsersController::getUsersDetails executed 164 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"provisioning_api"}}
{"reqId":"qTWzNGisp9K5GcxJ4mKA","level":2,"time":"2023-04-20T20:44:12+00:00","remoteAddr":"X.X.X.X","user":"id_rip","app":"activity","method":"GET","url":"/ocs/v2.php/apps/activity/api/v2/activity?previews=true&since=0&limit=50&format=json","message":"Controller OCA\\Activity\\Controller\\APIv2Controller::getDefault executed 159 queries.","userAgent":"Mozilla/5.0 (Windows) mirall/3.8.0stable-Win64 (build 20230331) (Nextcloud, windows-10.0.19045 ClientArchitecture: x86_64 OsArchitecture: x86_64)","version":"26.0.1.1","data":{"app":"activity"}}
{"reqId":"6UyE7GCwgXnmPqsIai2M","level":3,"time":"2023-04-21T05:11:10+00:00","remoteAddr":"X.X.X.X","user":"--","app":"PHP","method":"GET","url":"/ocs/v2.php/apps/user_status/api/v1/user_status?format=json","message":"session_start(): Ignoring session_start() because a session is already active at /var/www/vhosts/xxx.xxx/cloud.xxx.xxx/lib/private/Session/Internal.php#219","userAgent":"Mozilla/5.0 (Macintosh) mirall/3.8.1git (build 14890) (Nextcloud, osx-22.2.0 ClientArchitecture: x86_64 OsArchitecture: x86_64)","version":"26.0.1.1","data":{"app":"PHP"}}
{"reqId":"A7TSfgLzYTk39zrhLhn4","level":3,"time":"2023-04-21T07:12:01+00:00","remoteAddr":"X.X.X.X","user":"--","app":"PHP","method":"GET","url":"/ocs/v2.php/apps/user_status/api/v1/user_status?format=json","message":"session_start(): Ignoring session_start() because a session is already active at /var/www/vhosts/xxx.xxx/cloud.xxx.xxx/lib/private/Session/Internal.php#219","userAgent":"Mozilla/5.0 (Macintosh) mirall/3.8.1git (build 14890) (Nextcloud, osx-22.2.0 ClientArchitecture: x86_64 OsArchitecture: x86_64)","version":"26.0.1.1","data":{"app":"PHP"}}
{"reqId":"XhIsXkumPjVxRd3kA1rk","level":2,"time":"2023-04-21T08:07:23+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"3lrnvaemniUrGvtnYiMI","level":2,"time":"2023-04-21T08:08:27+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"BXkMN9cxNkCwtjOLbnTX","level":2,"time":"2023-04-21T08:10:00+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"yivecnLD9DPf4GQXT8kz","level":2,"time":"2023-04-21T08:13:33+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}
{"reqId":"Q2eamsrHakmcTN7iZaso","level":2,"time":"2023-04-21T08:13:41+00:00","remoteAddr":"X.X.X.X","user":"eugenio","app":"settings","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Controller OCA\\Settings\\Controller\\CheckSetupController::check executed 3988 queries.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 OPR/97.0.0.0","version":"26.0.1.1","data":{"app":"settings"}}



Do you have any ideas on what else I could do to better understand what the problem might be?
The permissions should be correct.

It’s strange: in practice, if I want to synchronize a file, it uploads it to the server, but if I want to delete or rename it, I can’t do it. It doesn’t do it from computers through clients, from the web interface it deletes it, but it reappears at the next refresh.

Thanks in advance for all the help.

AH01797: client denied by server configuration: /var/www/vhosts/--.--/cloud.--.--/remote.php

The error message is pretty much self-explanatory. Some directive, either in your main Apache config or in your VirtualHost config prohibits access to the remote.php file. So it would certainly be helpful if you would post the contents of your apache.conf or httpd.conf file, plus the VirtualHost config for your Nextcloud.

Unfortunately, I can’t tell you where exactly the files are located, because I don’t use CentOS or Plesk. However, you should be able to find the location of the config files in the CentOS and / or the Plesk documentation…

1 Like

Additional directives for HTTPS:

Header unset X-Powered-By
Header set Server puppa

#Redirect 301 /ocm-provider /ocm-provider
#Redirect 301 /ocs-provider /ocs-provider

<IfModule mod_fcgid.c>
	FcgidMaxRequestLen 107374182400
	FcgidMaxRequestsPerProcess 100
	FcgidProcessLifeTime 7200
</IfModule>

<IfModule mod_headers.c>
	# Add security and privacy related headers
	Header set X-Content-Type-Options "nosniff"
	Header set X-XSS-Protection "1; mode=block"
	Header set X-Robots-Tag "noindex, nofollow"
	Header set X-Download-Options "noopen"
	Header set X-Permitted-Cross-Domain-Policies "none"
	Header set Referrer-Policy "no-referrer"
	Header set X-Frame-Options "SAMEORIGIN"
	Header set Content-Security-Policy "default-src 'self'”
	#	Header set Set-Cookie "__Host-sess=s_idcloud; path=/; Secure; HttpOnly; SameSite"
	SetEnv modHeadersAvailable true
</IfModule>

<IfModule mod_rewrite.c>
	RewriteEngine on
	RewriteRule ^/\.well-known/carddav /remote.php/dav [R=301,L]
	RewriteRule ^/\.well-known/caldav /remote.php/dav [R=301,L]
	RewriteRule ^/\.well-known/webfinger /index.php/.well-known/webfinger [R=301,L]
	RewriteRule ^/\.well-known/nodeinfo /index.php/.well-known/nodeinfo [R=301,L]
</IfModule>

Additional directives for HTTP (all commented)

#Header unset X-Powered-By
#Header set Server puppa

#<IfModule mod_fcgid.c>
#	FcgidMaxRequestLen 107374182400
#	FcgidMaxRequestsPerProcess 100
#	FcgidProcessLifeTime 7200
#</IfModule>

#<IfModule mod_headers.c>
#	# Add security and privacy related headers
#	Header set X-Content-Type-Options "nosniff"
#	Header set X-XSS-Protection "1; mode=block"
#	Header set X-Robots-Tag "noindex, nofollow"
#	Header set X-Download-Options "noopen"
#	Header set X-Permitted-Cross-Domain-Policies "none"
#	Header set Referrer-Policy "no-referrer"
#	Header set X-Frame-Options "SAMEORIGIN"
#	Header set Content-Security-Policy "default-src 'self'”
#	#	Header set Set-Cookie "__Host-sess=idcloud; path=/; Secure; HttpOnly; SameSite"
#	SetEnv modHeadersAvailable true
#</IfModule>

Additional directives for nginx

gzip on;
gzip_disable "MSIE [1-6]\\.(?!.*SV1)";
gzip_proxied any;
gzip_comp_level 5;
gzip_types text/plain text/css application/javascript application/js application/x-javascript text/xml application/xml application/xml+rss text/javascript text/js image/x-icon image/bmp image/svg+xml;
gzip_vary on;

httpd.conf:

#ATTENTION!
#
#DO NOT MODIFY THIS FILE BECAUSE IT WAS GENERATED AUTOMATICALLY,
#SO ALL YOUR CHANGES WILL BE LOST THE NEXT TIME THE FILE IS GENERATED.
#IF YOU REQUIRE TO APPLY CUSTOM MODIFICATIONS, PERFORM THEM IN THE FOLLOWING FILES:
#/var/www/vhosts/system/cloud.xxx.xxx/conf/vhost.conf
#/var/www/vhosts/system/cloud.xxx.xxx/conf/vhost_ssl.conf
<IfModule mod_ssl.c>

	<VirtualHost 164.132.165.125:7081 >
		ServerName "cloud.xxx.xxx"
		ServerAlias "www.cloud.xxx.xxx"
		ServerAlias "ipv4.cloud.xxx.xxx"
		UseCanonicalName Off

		CustomLog /var/www/vhosts/system/cloud.xxx.xxx/logs/access_ssl_log plesklog
		ErrorLog "/var/www/vhosts/system/cloud.xxx.xxx/logs/error_log"

		DocumentRoot "/var/www/vhosts/xxx.xxx/cloud.xxx.xxx"

		<IfModule mod_suexec.c>
			SuexecUserGroup "xxx_xxx" "psacln"
		</IfModule>

		<IfModule mod_userdir.c>
			UserDir "/var/www/vhosts/xxx.xxx/web_users/*"
		</IfModule>

		<IfModule mod_sysenv.c>
			SetSysEnv PP_VHOST_ID "0b6b5cfd-9e88-45a4-bbca-667535abdc47"
		</IfModule>

		Alias "/plesk-stat" "/var/www/vhosts/system/cloud.xxx.xxx/statistics"
		<Location  /plesk-stat/>
			Options +Indexes
		</Location>
		<Location  /plesk-stat/logs/>
			Require valid-user
		</Location>
		Alias /webstat /var/www/vhosts/system/cloud.xxx.xxx/statistics/webstat
		Alias /webstat-ssl /var/www/vhosts/system/cloud.xxx.xxx/statistics/webstat-ssl
		Alias /ftpstat /var/www/vhosts/system/cloud.xxx.xxx/statistics/ftpstat
		Alias /anon_ftpstat /var/www/vhosts/system/cloud.xxx.xxx/statistics/anon_ftpstat
		Alias /awstats-icon /usr/share/awstats/wwwroot/icon

		SSLEngine on
		SSLVerifyClient none
		SSLCertificateFile /usr/local/psa/var/certificates/scfg9XAV6
		SSLCACertificateFile /usr/local/psa/var/certificates/scfVGAjmV

		TimeOut 3000
		<Directory /var/www/vhosts/xxx.xxx/cloud.xxx.xxx>

			<IfModule mod_proxy_fcgi.c>
				<Files ~ (\.php$)>
					SetHandler proxy:unix:/var/www/vhosts/system/cloud.xxx.xxx/php-fpm.sock|fcgi://127.0.0.1:9000
				</Files>
			</IfModule>

			SSLRequireSSL

			Options -Includes -ExecCGI

		</Directory>

		<Directory /var/www/vhosts/xxx.xxx>
			Options +FollowSymLinks
		</Directory>

		Alias /error_docs /var/www/vhosts/xxx.xxx/error_docs
		ErrorDocument 400 /error_docs/bad_request.html
		ErrorDocument 401 /error_docs/unauthorized.html
		ErrorDocument 403 /error_docs/forbidden.html
		ErrorDocument 404 /error_docs/not_found.html
		ErrorDocument 500 /error_docs/internal_server_error.html
		ErrorDocument 405 /error_docs/method_not_allowed.html
		ErrorDocument 406 /error_docs/not_acceptable.html
		ErrorDocument 407 /error_docs/proxy_authentication_required.html
		ErrorDocument 412 /error_docs/precondition_failed.html
		ErrorDocument 414 /error_docs/request_uri_too_long.html
		ErrorDocument 415 /error_docs/unsupported_media_type.html
		ErrorDocument 501 /error_docs/not_implemented.html
		ErrorDocument 502 /error_docs/bad_gateway.html
		ErrorDocument 503 /error_docs/maintenance.html

		DirectoryIndex "index.html" "index.cgi" "index.pl" "index.php" "index.xhtml" "index.htm" "index.shtml"

		Include "/var/www/vhosts/system/cloud.xxx.xxx/conf/vhost_ssl.conf"

		<Directory /var/www/vhosts/xxx.xxx>
			AllowOverride AuthConfig FileInfo Indexes Limit Options=Indexes,SymLinksIfOwnerMatch,MultiViews,FollowSymLinks,ExecCGI,Includes,IncludesNOEXEC
		</Directory>

		#extension letsencrypt begin
		Alias /.well-known/acme-challenge "/var/www/vhosts/default/htdocs/.well-known/acme-challenge"

		<Location /.well-known/acme-challenge/>
			# Require all granted
			Order Deny,Allow
			Allow from all
			Satisfy any
		</Location>

		<LocationMatch "^/.well-known/acme-challenge/(.*/|)\.">
			# Require all denied
			Order Allow,Deny
			Deny from all
		</LocationMatch>
		#extension letsencrypt end

		#extension sslit begin

		#extension sslit end

		#extension sectigo begin
		AliasMatch "^/.well-known/pki-validation/(?!fileauth.txt)$" "/var/www/vhosts/default/htdocs/.well-known/pki-validation/$1"

		<Location /.well-known/pki-validation/>
			# Require all granted
			Order Deny,Allow
			Allow from all
			Satisfy any
		</Location>

		<LocationMatch "^/.well-known/pki-validation/(.*/|)\.">
			# Require all denied
			Order Allow,Deny
			Deny from all
		</LocationMatch>
		#extension sectigo end
	</VirtualHost>

</IfModule>
<IfModule mod_ssl.c>

	<VirtualHost [2001:41d0:1008:197d::]:7081 127.0.0.1:7081>
		ServerName "cloud.xxx.xxx"
		ServerAlias "www.cloud.xxx.xxx"
		ServerAlias "ipv6.cloud.xxx.xxx"
		UseCanonicalName Off

		CustomLog /var/www/vhosts/system/cloud.xxx.xxx/logs/access_ssl_log plesklog
		ErrorLog "/var/www/vhosts/system/cloud.xxx.xxx/logs/error_log"

		DocumentRoot "/var/www/vhosts/xxx.xxx/cloud.xxx.xxx"

		<IfModule mod_suexec.c>
			SuexecUserGroup "xxx_xxx" "psacln"
		</IfModule>

		<IfModule mod_userdir.c>
			UserDir "/var/www/vhosts/xxx.xxx/web_users/*"
		</IfModule>

		<IfModule mod_sysenv.c>
			SetSysEnv PP_VHOST_ID "0b6b5cfd-9e88-45a4-bbca-667535abdc47"
		</IfModule>

		Alias "/plesk-stat" "/var/www/vhosts/system/cloud.xxx.xxx/statistics"
		<Location  /plesk-stat/>
			Options +Indexes
		</Location>
		<Location  /plesk-stat/logs/>
			Require valid-user
		</Location>
		Alias /webstat /var/www/vhosts/system/cloud.xxx.xxx/statistics/webstat
		Alias /webstat-ssl /var/www/vhosts/system/cloud.xxx.xxx/statistics/webstat-ssl
		Alias /ftpstat /var/www/vhosts/system/cloud.xxx.xxx/statistics/ftpstat
		Alias /anon_ftpstat /var/www/vhosts/system/cloud.xxx.xxx/statistics/anon_ftpstat
		Alias /awstats-icon /usr/share/awstats/wwwroot/icon

		SSLEngine on
		SSLVerifyClient none
		SSLCertificateFile /usr/local/psa/var/certificates/scfg9XAV6
		SSLCACertificateFile /usr/local/psa/var/certificates/scfVGAjmV

		TimeOut 3000
		<Directory /var/www/vhosts/xxx.xxx/cloud.xxx.xxx>

			<IfModule mod_proxy_fcgi.c>
				<Files ~ (\.php$)>
					SetHandler proxy:unix:/var/www/vhosts/system/cloud.xxx.xxx/php-fpm.sock|fcgi://127.0.0.1:9000
				</Files>
			</IfModule>

			SSLRequireSSL

			Options -Includes -ExecCGI

		</Directory>

		<Directory /var/www/vhosts/xxx.xxx>
			Options +FollowSymLinks
		</Directory>

		Alias /error_docs /var/www/vhosts/xxx.xxx/error_docs
		ErrorDocument 400 /error_docs/bad_request.html
		ErrorDocument 401 /error_docs/unauthorized.html
		ErrorDocument 403 /error_docs/forbidden.html
		ErrorDocument 404 /error_docs/not_found.html
		ErrorDocument 500 /error_docs/internal_server_error.html
		ErrorDocument 405 /error_docs/method_not_allowed.html
		ErrorDocument 406 /error_docs/not_acceptable.html
		ErrorDocument 407 /error_docs/proxy_authentication_required.html
		ErrorDocument 412 /error_docs/precondition_failed.html
		ErrorDocument 414 /error_docs/request_uri_too_long.html
		ErrorDocument 415 /error_docs/unsupported_media_type.html
		ErrorDocument 501 /error_docs/not_implemented.html
		ErrorDocument 502 /error_docs/bad_gateway.html
		ErrorDocument 503 /error_docs/maintenance.html

		DirectoryIndex "index.html" "index.cgi" "index.pl" "index.php" "index.xhtml" "index.htm" "index.shtml"

		Include "/var/www/vhosts/system/cloud.xxx.xxx/conf/vhost_ssl.conf"

		<Directory /var/www/vhosts/xxx.xxx>
			AllowOverride AuthConfig FileInfo Indexes Limit Options=Indexes,SymLinksIfOwnerMatch,MultiViews,FollowSymLinks,ExecCGI,Includes,IncludesNOEXEC
		</Directory>

		#extension letsencrypt begin
		Alias /.well-known/acme-challenge "/var/www/vhosts/default/htdocs/.well-known/acme-challenge"

		<Location /.well-known/acme-challenge/>
			# Require all granted
			Order Deny,Allow
			Allow from all
			Satisfy any
		</Location>

		<LocationMatch "^/.well-known/acme-challenge/(.*/|)\.">
			# Require all denied
			Order Allow,Deny
			Deny from all
		</LocationMatch>
		#extension letsencrypt end

		#extension sslit begin

		#extension sslit end

		#extension sectigo begin
		AliasMatch "^/.well-known/pki-validation/(?!fileauth.txt)$" "/var/www/vhosts/default/htdocs/.well-known/pki-validation/$1"

		<Location /.well-known/pki-validation/>
			# Require all granted
			Order Deny,Allow
			Allow from all
			Satisfy any
		</Location>

		<LocationMatch "^/.well-known/pki-validation/(.*/|)\.">
			# Require all denied
			Order Allow,Deny
			Deny from all
		</LocationMatch>
		#extension sectigo end
	</VirtualHost>

</IfModule>

<VirtualHost 164.132.165.125:7080 >
	ServerName "cloud.xxx.xxx"
	ServerAlias "www.cloud.xxx.xxx"
	ServerAlias "ipv4.cloud.xxx.xxx"
	UseCanonicalName Off

	CustomLog /var/www/vhosts/system/cloud.xxx.xxx/logs/access_log plesklog
	ErrorLog "/var/www/vhosts/system/cloud.xxx.xxx/logs/error_log"

	Include "/var/www/vhosts/system/cloud.xxx.xxx/conf/vhost.conf"

	<IfModule mod_rewrite.c>
		RewriteEngine On
		RewriteCond %{HTTPS} off
		RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L,QSA]
	</IfModule>
</VirtualHost>

<VirtualHost [2001:41d0:1008:197d::]:7080 127.0.0.1:7080>
	ServerName "cloud.xxx.xxx"
	ServerAlias "www.cloud.xxx.xxx"
	ServerAlias "ipv6.cloud.xxx.xxx"
	UseCanonicalName Off

	CustomLog /var/www/vhosts/system/cloud.xxx.xxx/logs/access_log plesklog
	ErrorLog "/var/www/vhosts/system/cloud.xxx.xxx/logs/error_log"

	Include "/var/www/vhosts/system/cloud.xxx.xxx/conf/vhost.conf"

	<IfModule mod_rewrite.c>
		RewriteEngine On
		RewriteCond %{HTTPS} off
		RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L,QSA]
	</IfModule>
</VirtualHost>

nginx.conf

#ATTENTION!
#
#DO NOT MODIFY THIS FILE BECAUSE IT WAS GENERATED AUTOMATICALLY,
#SO ALL YOUR CHANGES WILL BE LOST THE NEXT TIME THE FILE IS GENERATED.

server {
	listen 164.132.165.125:443 ssl http2;

	server_name cloud.xxx.xxx;
	server_name www.cloud.xxx.xxx;
	server_name ipv4.cloud.xxx.xxx;

	ssl_certificate             /usr/local/psa/var/certificates/scfg9XAV6;
	ssl_certificate_key         /usr/local/psa/var/certificates/scfg9XAV6;

	access_log "/var/www/vhosts/system/cloud.xxx.xxx/logs/proxy_access_ssl_log";
	error_log "/var/www/vhosts/system/cloud.xxx.xxx/logs/proxy_error_log";

	root "/var/www/vhosts/xxx.xxx/cloud.xxx.xxx";

	#extension letsencrypt begin
	location ^~ /.well-known/acme-challenge/ {
		root /var/www/vhosts/default/htdocs;

		types { }
		default_type text/plain;

		satisfy any;
		auth_basic off;
		allow all;

		location ~ ^/\.well-known/acme-challenge.*/\. {
			deny all;
		}
	}
	#extension letsencrypt end

	#extension sslit begin

	add_header Strict-Transport-Security "max-age=15768000; includeSubDomains" always;

	#OCSP Stapling
	ssl_stapling on;
	ssl_stapling_verify on;

	#extension sslit end

	#extension sectigo begin
	location ^~ /.well-known/pki-validation/fileauth.txt {
		try_files $uri $uri/ =404;
	}

	location ^~ /.well-known/pki-validation/ {
		root /var/www/vhosts/default/htdocs;

		types { }
		default_type text/plain;

		satisfy any;
		auth_basic off;
		allow all;

		location ~ ^/\.well-known/pki-validation.*/\. {
			deny all;
		}
	}
	#extension sectigo end

	error_page 400 "/error_docs/bad_request.html";
	error_page 401 "/error_docs/unauthorized.html";
	error_page 403 "/error_docs/forbidden.html";
	error_page 404 "/error_docs/not_found.html";
	error_page 500 "/error_docs/internal_server_error.html";
	error_page 405 "/error_docs/method_not_allowed.html";
	error_page 406 "/error_docs/not_acceptable.html";
	error_page 407 "/error_docs/proxy_authentication_required.html";
	error_page 412 "/error_docs/precondition_failed.html";
	error_page 414 "/error_docs/request_uri_too_long.html";
	error_page 415 "/error_docs/unsupported_media_type.html";
	error_page 501 "/error_docs/not_implemented.html";
	error_page 502 "/error_docs/bad_gateway.html";
	error_page 503 "/error_docs/maintenance.html";

	location ^~ /error_docs {
		root "/var/www/vhosts/xxx.xxx";
	}

	location / {
		proxy_read_timeout 3000;
		proxy_pass https://164.132.165.125:7081;
		proxy_hide_header upgrade;
		proxy_set_header Host             $host;
		proxy_set_header X-Real-IP        $remote_addr;
		proxy_set_header X-Forwarded-For  $proxy_add_x_forwarded_for;
		access_log off;

	}

	location ~ ^/(plesk-stat|awstats-icon|webstat|webstat-ssl|ftpstat|anon_ftpstat) {
		proxy_pass https://164.132.165.125:7081;
		proxy_hide_header upgrade;
		proxy_set_header Host             $host;
		proxy_set_header X-Real-IP        $remote_addr;
		proxy_set_header X-Forwarded-For  $proxy_add_x_forwarded_for;
		access_log off;

	}

	location @fallback {
		proxy_read_timeout 3000;
		proxy_pass https://164.132.165.125:7081;
		proxy_hide_header upgrade;
		proxy_set_header Host             $host;
		proxy_set_header X-Real-IP        $remote_addr;
		proxy_set_header X-Forwarded-For  $proxy_add_x_forwarded_for;
		access_log off;

	}

	location ~ ^/(.*\.(ac3|avi|bmp|bz2|css|cue|dat|doc|docx|dts|eot|exe|flv|gif|gz|htm|html|ico|img|iso|jpeg|jpg|js|mkv|mp3|mp4|mpeg|mpg|ogg|pdf|png|ppt|pptx|qt|rar|rm|svg|swf|tar|tgz|ttf|txt|wav|woff|woff2|xls|xlsx|zip))$ {
		try_files $uri @fallback;
	}

	location ~ ^/~(.+?)(/.*?\.php)(/.*)?$ {
		fastcgi_read_timeout 3000;
		alias /var/www/vhosts/xxx.xxx/web_users/$1/$2;
		fastcgi_split_path_info ^((?U).+\.php)(/?.+)$;
		try_files $uri $fastcgi_script_name =404;
		fastcgi_param PATH_INFO $fastcgi_path_info;
		fastcgi_pass "unix:/var/www/vhosts/system/cloud.xxx.xxx/php-fpm.sock";
		include /etc/nginx/fastcgi.conf;

	}

	location ~ ^/~(.+?)(/.*)?$ {
		proxy_read_timeout 3000;
		proxy_pass https://164.132.165.125:7081;
		proxy_hide_header upgrade;
		proxy_set_header Host             $host;
		proxy_set_header X-Real-IP        $remote_addr;
		proxy_set_header X-Forwarded-For  $proxy_add_x_forwarded_for;
		access_log off;

	}

	location ~ \.php(/.*)?$ {
		fastcgi_read_timeout 3000;
		fastcgi_split_path_info ^((?U).+\.php)(/?.+)$;
		try_files $uri $fastcgi_script_name =404;
		fastcgi_param PATH_INFO $fastcgi_path_info;
		fastcgi_pass "unix:/var/www/vhosts/system/cloud.xxx.xxx/php-fpm.sock";
		include /etc/nginx/fastcgi.conf;

	}

	add_header X-Powered-By PleskLin;

	include "/var/www/vhosts/system/cloud.xxx.xxx/conf/vhost_nginx.conf";
}

server {
	listen [2001:41d0:1008:197d::]:443 ssl http2;

	server_name cloud.xxx.xxx;
	server_name www.cloud.xxx.xxx;
	server_name ipv6.cloud.xxx.xxx;

	ssl_certificate             /usr/local/psa/var/certificates/scfg9XAV6;
	ssl_certificate_key         /usr/local/psa/var/certificates/scfg9XAV6;

	access_log "/var/www/vhosts/system/cloud.xxx.xxx/logs/proxy_access_ssl_log";
	error_log "/var/www/vhosts/system/cloud.xxx.xxx/logs/proxy_error_log";

	root "/var/www/vhosts/xxx.xxx/cloud.xxx.xxx";

	#extension letsencrypt begin
	location ^~ /.well-known/acme-challenge/ {
		root /var/www/vhosts/default/htdocs;

		types { }
		default_type text/plain;

		satisfy any;
		auth_basic off;
		allow all;

		location ~ ^/\.well-known/acme-challenge.*/\. {
			deny all;
		}
	}
	#extension letsencrypt end

	#extension sslit begin

	add_header Strict-Transport-Security "max-age=15768000; includeSubDomains" always;

	#OCSP Stapling
	ssl_stapling on;
	ssl_stapling_verify on;

	#extension sslit end

	#extension sectigo begin
	location ^~ /.well-known/pki-validation/fileauth.txt {
		try_files $uri $uri/ =404;
	}

	location ^~ /.well-known/pki-validation/ {
		root /var/www/vhosts/default/htdocs;

		types { }
		default_type text/plain;

		satisfy any;
		auth_basic off;
		allow all;

		location ~ ^/\.well-known/pki-validation.*/\. {
			deny all;
		}
	}
	#extension sectigo end

	error_page 400 "/error_docs/bad_request.html";
	error_page 401 "/error_docs/unauthorized.html";
	error_page 403 "/error_docs/forbidden.html";
	error_page 404 "/error_docs/not_found.html";
	error_page 500 "/error_docs/internal_server_error.html";
	error_page 405 "/error_docs/method_not_allowed.html";
	error_page 406 "/error_docs/not_acceptable.html";
	error_page 407 "/error_docs/proxy_authentication_required.html";
	error_page 412 "/error_docs/precondition_failed.html";
	error_page 414 "/error_docs/request_uri_too_long.html";
	error_page 415 "/error_docs/unsupported_media_type.html";
	error_page 501 "/error_docs/not_implemented.html";
	error_page 502 "/error_docs/bad_gateway.html";
	error_page 503 "/error_docs/maintenance.html";

	location ^~ /error_docs {
		root "/var/www/vhosts/xxx.xxx";
	}

	location / {
		proxy_read_timeout 3000;
		proxy_pass https://[2001:41d0:1008:197d::]:7081;
		proxy_hide_header upgrade;
		proxy_set_header Host             $host;
		proxy_set_header X-Real-IP        $remote_addr;
		proxy_set_header X-Forwarded-For  $proxy_add_x_forwarded_for;
		access_log off;

	}

	location ~ ^/(plesk-stat|awstats-icon|webstat|webstat-ssl|ftpstat|anon_ftpstat) {
		proxy_pass https://[2001:41d0:1008:197d::]:7081;
		proxy_hide_header upgrade;
		proxy_set_header Host             $host;
		proxy_set_header X-Real-IP        $remote_addr;
		proxy_set_header X-Forwarded-For  $proxy_add_x_forwarded_for;
		access_log off;

	}

	location @fallback {
		proxy_read_timeout 3000;
		proxy_pass https://[2001:41d0:1008:197d::]:7081;
		proxy_hide_header upgrade;
		proxy_set_header Host             $host;
		proxy_set_header X-Real-IP        $remote_addr;
		proxy_set_header X-Forwarded-For  $proxy_add_x_forwarded_for;
		access_log off;

	}

	location ~ ^/(.*\.(ac3|avi|bmp|bz2|css|cue|dat|doc|docx|dts|eot|exe|flv|gif|gz|htm|html|ico|img|iso|jpeg|jpg|js|mkv|mp3|mp4|mpeg|mpg|ogg|pdf|png|ppt|pptx|qt|rar|rm|svg|swf|tar|tgz|ttf|txt|wav|woff|woff2|xls|xlsx|zip))$ {
		try_files $uri @fallback;
	}

	location ~ ^/~(.+?)(/.*?\.php)(/.*)?$ {
		fastcgi_read_timeout 3000;
		alias /var/www/vhosts/xxx.xxx/web_users/$1/$2;
		fastcgi_split_path_info ^((?U).+\.php)(/?.+)$;
		try_files $uri $fastcgi_script_name =404;
		fastcgi_param PATH_INFO $fastcgi_path_info;
		fastcgi_pass "unix:/var/www/vhosts/system/cloud.xxx.xxx/php-fpm.sock";
		include /etc/nginx/fastcgi.conf;

	}

	location ~ ^/~(.+?)(/.*)?$ {
		proxy_read_timeout 3000;
		proxy_pass https://[2001:41d0:1008:197d::]:7081;
		proxy_hide_header upgrade;
		proxy_set_header Host             $host;
		proxy_set_header X-Real-IP        $remote_addr;
		proxy_set_header X-Forwarded-For  $proxy_add_x_forwarded_for;
		access_log off;

	}

	location ~ \.php(/.*)?$ {
		fastcgi_read_timeout 3000;
		fastcgi_split_path_info ^((?U).+\.php)(/?.+)$;
		try_files $uri $fastcgi_script_name =404;
		fastcgi_param PATH_INFO $fastcgi_path_info;
		fastcgi_pass "unix:/var/www/vhosts/system/cloud.xxx.xxx/php-fpm.sock";
		include /etc/nginx/fastcgi.conf;

	}

	add_header X-Powered-By PleskLin;

	include "/var/www/vhosts/system/cloud.xxx.xxx/conf/vhost_nginx.conf";
}

server {
	listen 164.132.165.125:80;

	server_name cloud.xxx.xxx;
	server_name www.cloud.xxx.xxx;
	server_name ipv4.cloud.xxx.xxx;

	access_log "/var/www/vhosts/system/cloud.xxx.xxx/logs/proxy_access_log";
	error_log "/var/www/vhosts/system/cloud.xxx.xxx/logs/proxy_error_log";

	location / {
		return 301 https://$host$request_uri;
	}
}

server {
	listen [2001:41d0:1008:197d::]:80;

	server_name cloud.xxx.xxx;
	server_name www.cloud.xxx.xxx;
	server_name ipv6.cloud.xxx.xxx;

	access_log "/var/www/vhosts/system/cloud.xxx.xxx/logs/proxy_access_log";
	error_log "/var/www/vhosts/system/cloud.xxx.xxx/logs/proxy_error_log";

	location / {
		return 301 https://$host$request_uri;
	}
}        

Added on Additional directives for HTTPS this:

<Location />
	# Require all granted
	Order Deny,Allow
	Allow from all
	Satisfy any
</Location>

It seems to be works. Is it correct?

I have to admit that I don’t fully understand your config (mine is much simpler), and therefore can’t evaluate it fully…

However, there are two basic requirements for any web server config

  1. everything has to work as expected
  2. it has to be secure, i.e. no (sub)directories, data or config files must be directly accessible.

If both requirements are met, I guess It’s fine. :wink:

1 Like

Thanks @bb77

I think it’s Plesk. I haven’t perfectly and fully understood him yet, but he thinks in “levels”. Basic settings, domain settings, subdomain settings. For everything: apache, nginx, php and so on.

I also believe that those are the two fundamental rules. I think this is safe, control is then delegated to NextCloud. Even if the “Allow from all” part makes me sweat a bit… :wink:

Thank you so much!