X-frame-header is not configured to match SAMEORIGIN

[vatolin]

NextCloud 17.0.0.9
PHP 7.3.9-1~deb10u1
nginx 1.10.3
Linux raspberrypi 4.19.66-v7+

My German Nextcloud warns me at https://nextcloud.mydomain.tld/settings/admin/overview:

The X-Frame Options HTTP header is not configured to match SAMEORIGIN. This is a potential security risk and it is recommended to change this setting.

(manually translated into English)

How can I fix this issue?

[Schmu]

[SOLVED] Docker NC17 tag "fpm" - The "X-Frame-Options" HTTP header is not set to "SAMEORIGIN"

Hi, Removing the header from the web server config was a solution before, when NC sent this header itself. With NC17 that changed and NC doesn’t sent this header anymore by itself. Consequently users have to add the header to their web server configuration again. When you go to the following page on your server as admin user, you can see the correct nginx config for NC17: https://your.domain.tld/settings/help?mode=admin (admin profile pic -> help -> Administration documentation -> Installa…