Webdav directories visible by other users using nginx proxy

Nextcloud version: 21.0.3
Operating system and version: redhat 8.4
Apache or nginx version: nginx 1.14.1
PHP version: 7.4.22

A user that is logged in and accesses nextcloud via webdav can browse to the parent directory and see directories of other users and therefor their usernames. Perhaps I made mistake in my nginx configuration file?


Steps to replicate it:

  1. Install nextcloud
  2. Use nginx proxy and this config file https://pastebin.com/wNGWrHyh
  3. log in as a regular user in the webdav interface
  4. click on the parent button
  5. access any folder below

This is our nextcloud config file


Disabling the webdav interface would be an acceptable workaround for us for the time being.