Webdav directories visible by other users using nginx proxy

ℹ️ Support
, ,
1

Nextcloud version: 21.0.3
Operating system and version: redhat 8.4
Apache or nginx version: nginx 1.14.1
PHP version: 7.4.22

A user that is logged in and accesses nextcloud via webdav can browse to the parent directory and see directories of other users and therefor their usernames. Perhaps I made mistake in my nginx configuration file?

https://pastebin.com/wNGWrHyh

Steps to replicate it:

  1. Install nextcloud
  2. Use nginx proxy and this config file https://pastebin.com/wNGWrHyh
  3. log in as a regular user in the webdav interface
  4. click on the parent button
  5. access any folder below

This is our nextcloud config file

https://pastebin.com/LBcYjJvJ

Disabling the webdav interface would be an acceptable workaround for us for the time being.