# \#modsecurity **URL:** https://help.nextcloud.com/tag/modsecurity/137.md [Latest](https://help.nextcloud.com/latest.md) · [Categories](https://help.nextcloud.com/categories.md) · [Tags](https://help.nextcloud.com/tags.md) --- ## [modSecurity recommendations](https://help.nextcloud.com/t/modsecurity-recommendations/243565)
**Author:** [@Kerasit](https://help.nextcloud.com/u/Kerasit)\ **Replies:** 12\ **Last updated:** [April 24, 2026, 7:28am UTC](https://help.nextcloud.com/t/modsecurity-recommendations/243565 "2026-04-24T07:28:02Z")
I have no support/technical question and have seen the support category. (Be aware that direct support questions will be deleted.) on Which general topic do you have This short little post is about modSecurity and a rec… --- ## [Nextcloud with CIFS external storage + nginx reverse proxy + modsecurity for WAF](https://help.nextcloud.com/t/nextcloud-with-cifs-external-storage-nginx-reverse-proxy-modsecurity-for-waf/239316)
**Author:** [@MourIdri](https://help.nextcloud.com/u/MourIdri)\ **Replies:** 1\ **Last updated:** [January 26, 2026, 11:35am UTC](https://help.nextcloud.com/t/nextcloud-with-cifs-external-storage-nginx-reverse-proxy-modsecurity-for-waf/239316 "2026-01-26T11:35:44Z")
▶ Support intro Some or all of the below information will be requested if it isn’t supplied; for fastest response please provide as much as you can. :heart: The Basics Nextcloud Server version (e.g., 29.x.x): 30 Oper… --- ## [Fehler beim Hochladen, Statuscode 413](https://help.nextcloud.com/t/fehler-beim-hochladen-statuscode-413/229609)
**Author:** [@WolfgangBasel](https://help.nextcloud.com/u/WolfgangBasel)\ **Replies:** 5\ **Last updated:** [August 22, 2025, 7:51pm UTC](https://help.nextcloud.com/t/fehler-beim-hochladen-statuscode-413/229609 "2025-08-22T19:51:01Z")
▶ Support intro Some or all of the below information will be requested if it isn’t supplied; for fastest response please provide as much as you can. :heart: The Basics Nextcloud Server version (e.g., 29.x.x): $OC\_Versi… --- ## [How to implement Modsecurity for Nextcloud AIO](https://help.nextcloud.com/t/how-to-implement-modsecurity-for-nextcloud-aio/199999)
**Author:** [@Nanak\_Singh](https://help.nextcloud.com/u/Nanak_Singh)\ **Replies:** 7\ **Last updated:** [August 21, 2025, 10:46pm UTC](https://help.nextcloud.com/t/how-to-implement-modsecurity-for-nextcloud-aio/199999 "2025-08-21T22:46:49Z")
I am running nextcloud AIO with reverse proxy. I want to configure modsecurity how is it possible? I just want to configure a rule where a url is blocked if accessed from a specific ip range. --- ## [Operation is blocked by access control Nginx Modsecurity problem](https://help.nextcloud.com/t/operation-is-blocked-by-access-control-nginx-modsecurity-problem/228564)
**Author:** [@diegosn79](https://help.nextcloud.com/u/diegosn79)\ **Replies:** 1\ **Last updated:** [July 15, 2025, 8:08am UTC](https://help.nextcloud.com/t/operation-is-blocked-by-access-control-nginx-modsecurity-problem/228564 "2025-07-15T08:08:01Z")
Hello everyone, I’m sharing the solution to a problem I ran into, in case it helps someone else. The symptom is very clear: everything works fine, but when you try to upload a file larger than a certain size (e.g., 40 o… --- ## [Nextcloud Hub 9 (30.0.4) und Kalender Import](https://help.nextcloud.com/t/nextcloud-hub-9-30-0-4-und-kalender-import/213337)
**Author:** [@ddeutzer](https://help.nextcloud.com/u/ddeutzer)\ **Replies:** 1\ **Last updated:** [December 25, 2024, 11:53am UTC](https://help.nextcloud.com/t/nextcloud-hub-9-30-0-4-und-kalender-import/213337 "2024-12-25T11:53:26Z")
Hallo, ich habe einen Ubuntu Server, Plesk mehrere Domains und dort ist unter einer Subdomain Nextcloud installiert. Funktioniert auch bestens, bis auf das Importieren von Kallender Ical. Hatte immer sonst funktioni… --- ## [ModSecurity / Apache / Nextcloud](https://help.nextcloud.com/t/modsecurity-apache-nextcloud/83987)
**Author:** [@castletonroad](https://help.nextcloud.com/u/castletonroad)\ **Replies:** 9\ **Last updated:** [November 17, 2024, 6:26pm UTC](https://help.nextcloud.com/t/modsecurity-apache-nextcloud/83987 "2024-11-17T18:26:12Z")
A quick query… Has anyone managed to get ModSecurity working successfully with Nextcloud (and Apache)? I’m running Nextcloud 18.0.5 on Raspbian Buster with Apache/2.4.38 (Raspbian), all works great, and I have ModSecur… --- ## [Security hardening](https://help.nextcloud.com/t/security-hardening/207246)
**Author:** [@sdamico95](https://help.nextcloud.com/u/sdamico95)\ **Replies:** 5\ **Last updated:** [October 20, 2024, 9:40pm UTC](https://help.nextcloud.com/t/security-hardening/207246 "2024-10-20T21:40:50Z")
Hello, I installed Nextcloud using docker images and for the moment it is running fine. I installed nginx with WAF (mod\_security) in order to implement https on my cloud server, in order not to expose directly nextcloud… --- ## [File upload "kills" whole server through Apache?](https://help.nextcloud.com/t/file-upload-kills-whole-server-through-apache/181072)
**Author:** [@MBaumi](https://help.nextcloud.com/u/MBaumi)\ **Replies:** 1\ **Last updated:** [February 6, 2024, 2:28pm UTC](https://help.nextcloud.com/t/file-upload-kills-whole-server-through-apache/181072 "2024-02-06T14:28:14Z")
Hey, I just installed a new instance of Nextcloud. We imported a bunch of data from an old instance (read: FTP it in, do a bunch of chmod). Now, Upload and Download are working, so permissions should be fine. But it onl… --- ## [WebDAV interface broken?](https://help.nextcloud.com/t/webdav-interface-broken/110314)
**Author:** [@DaddyWarlock](https://help.nextcloud.com/u/DaddyWarlock)\ **Replies:** 4\ **Last updated:** [March 20, 2023, 6:46pm UTC](https://help.nextcloud.com/t/webdav-interface-broken/110314 "2023-03-20T18:46:49Z")
Nextcloud version 21.0.0 Operating system and version Ubuntu 20.04 nginx version 1.19.7 PHP version 8.0 The issue you are facing: Since upgrading to NC21 I get an error saying WebDAV interface seems to be broken. I… --- ## [Nextcloud and the Modsecurity Core Rule Set](https://help.nextcloud.com/t/nextcloud-and-the-modsecurity-core-rule-set/136656)
**Author:** [@geppi](https://help.nextcloud.com/u/geppi)\ **Replies:** 0\ **Last updated:** [April 1, 2022, 2:22pm UTC](https://help.nextcloud.com/t/nextcloud-and-the-modsecurity-core-rule-set/136656 "2022-04-01T14:22:33Z")
I’m wondering if Nextcloud is not seeing any value in Modsecurity and the Core Rule Set? There is for example a pull request open at CRS development to mitigate the “Nextcloud 20 false-positives” for over a year now. Th… --- ## [Impossible to remove a contact](https://help.nextcloud.com/t/impossible-to-remove-a-contact/132312)
**Author:** [@jefapi](https://help.nextcloud.com/u/jefapi)\ **Replies:** 0\ **Last updated:** [January 31, 2022, 8:52am UTC](https://help.nextcloud.com/t/impossible-to-remove-a-contact/132312 "2022-01-31T08:52:57Z")
Support introSorry to hear you’re facing problems :slightly\_frowning\_face: help.nextcloud.com is for home/non-enterprise users. If you’re running a business, paid support can be accessed via portal.nextcloud.com where … --- ## [Multiple security errors and warnings (mod\_security)](https://help.nextcloud.com/t/multiple-security-errors-and-warnings-mod-security/125762)
**Author:** [@Salsa](https://help.nextcloud.com/u/Salsa)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 10:56pm UTC](https://help.nextcloud.com/t/multiple-security-errors-and-warnings-mod-security/125762 "2021-11-01T22:56:14Z")
Nextcloud version (eg, 20.0.5): 22.2.0 Operating system and version (eg, Ubuntu 20.04): Raspbian 10.11 Apache or nginx version (eg, Apache 2.4.25): Apache 2.4.38 PHP version (eg, 7.4): PHP 7.3.29 The issue you are f… --- ## [Connection via App Token in the browser](https://help.nextcloud.com/t/connection-via-app-token-in-the-browser/109618)
**Author:** [@Maveric](https://help.nextcloud.com/u/Maveric)\ **Replies:** 2\ **Last updated:** [March 6, 2021, 11:03am UTC](https://help.nextcloud.com/t/connection-via-app-token-in-the-browser/109618 "2021-03-06T11:03:35Z")
Hello, I would like to allow the use of connection via the app token from the browser. Currently when we get to the login page, we don’t have the button below to login via app token. How can I enable this feature plea… --- ## [Desktop Client: Access Denied with code 510](https://help.nextcloud.com/t/desktop-client-access-denied-with-code-510/55593)
**Author:** [@pato](https://help.nextcloud.com/u/pato)\ **Replies:** 4\ **Last updated:** [January 28, 2021, 8:52pm UTC](https://help.nextcloud.com/t/desktop-client-access-denied-with-code-510/55593 "2021-01-28T20:52:30Z")
On a new nextcloud installation, I have a problem with the desktop client. Nextcloud version: 16.0.1 Desktop OS: Manjaro 18.0.4 Nextcloud desktop client: 2.5.2git I put files in my local nextcloud folder and the clie… --- ## [This operation is forbitten Config File invalid and CalDav and CardDav errors](https://help.nextcloud.com/t/this-operation-is-forbitten-config-file-invalid-and-caldav-and-carddav-errors/101170)
**Author:** [@josaladino2](https://help.nextcloud.com/u/josaladino2)\ **Replies:** 2\ **Last updated:** [December 20, 2020, 5:14pm UTC](https://help.nextcloud.com/t/this-operation-is-forbitten-config-file-invalid-and-caldav-and-carddav-errors/101170 "2020-12-20T17:14:20Z")
Support introSorry to hear you’re facing problems :slightly\_frowning\_face: help.nextcloud.com is for home/non-enterprise users. If you’re running a business, paid support can be accessed via portal.nextcloud.com where … --- ## [Lost my data - Access denied with code 403](https://help.nextcloud.com/t/lost-my-data-access-denied-with-code-403/101354)
**Author:** [@josaladino2](https://help.nextcloud.com/u/josaladino2)\ **Replies:** 9\ **Last updated:** [December 17, 2020, 9:48pm UTC](https://help.nextcloud.com/t/lost-my-data-access-denied-with-code-403/101354 "2020-12-17T21:48:40Z")
Support introSorry to hear you’re facing problems :slightly\_frowning\_face: help.nextcloud.com is for home/non-enterprise users. If you’re running a business, paid support can be accessed via portal.nextcloud.com where … --- ## [Interner Server Fehler - Keine Fehler im Log zu finden](https://help.nextcloud.com/t/interner-server-fehler-keine-fehler-im-log-zu-finden/86911)
**Author:** [@MegaV0lt](https://help.nextcloud.com/u/MegaV0lt)\ **Replies:** 3\ **Last updated:** [July 13, 2020, 8:47am UTC](https://help.nextcloud.com/t/interner-server-fehler-keine-fehler-im-log-zu-finden/86911 "2020-07-13T08:47:23Z")
Support introSorry to hear you’re facing problems :slightly\_frowning\_face: help.nextcloud.com is for home/non-enterprise users. If you’re running a business, paid support can be accessed via portal.nextcloud.com where … --- ## [No access to data: nextcloud and mod\_security2](https://help.nextcloud.com/t/no-access-to-data-nextcloud-and-mod-security2/51151)
**Author:** [@rizze](https://help.nextcloud.com/u/rizze)\ **Replies:** 2\ **Last updated:** [June 16, 2020, 7:36am UTC](https://help.nextcloud.com/t/no-access-to-data-nextcloud-and-mod-security2/51151 "2020-06-16T07:36:22Z")
Nextcloud: 15.0.5 OS: Debian Stretch Apache: 2.4.25 PHP: 7.0 My apache is configured to use mod\_security2. I installed nextcloud alongside the instruction manual. Then user and group permissions were customized due t… --- ## [Err\_too\_many\_redirects 15.0.7](https://help.nextcloud.com/t/err-too-many-redirects-15-0-7/51293)
**Author:** [@Adam\_Cole](https://help.nextcloud.com/u/Adam_Cole)\ **Replies:** 0\ **Last updated:** [April 9, 2019, 10:07pm UTC](https://help.nextcloud.com/t/err-too-many-redirects-15-0-7/51293 "2019-04-09T22:07:28Z")
Nextcloud version (eg, 12.0.2): 15.0.7 Operating system and version (eg, Ubuntu 17.04): Ubuntu 18.04 LTS (Nextcloud preconfigured VM) Apache or nginx version (eg, Apache 2.4.25): 2.4.29 PHP version (eg, 7.1): 7.4 The… --- ## [Libapache2-mod-security2 causes error 403 and prevents access](https://help.nextcloud.com/t/libapache2-mod-security2-causes-error-403-and-prevents-access/50005)
**Author:** [@dkellygb](https://help.nextcloud.com/u/dkellygb)\ **Replies:** 2\ **Last updated:** [March 22, 2019, 11:27am UTC](https://help.nextcloud.com/t/libapache2-mod-security2-causes-error-403-and-prevents-access/50005 "2019-03-22T11:27:31Z")
I have an Ubuntu 18.04 server with Nextcloud installed in an Apache2 (Apache/2.4.29 (Ubuntu)) virtual host. I am using PHP 7.3. In an attempt to harden the server, I installed libapache2-mod-security2. This immediatel… --- ## [ModSecurity error: "Partial results are valid but processing is incomplete"](https://help.nextcloud.com/t/modsecurity-error-partial-results-are-valid-but-processing-is-incomplete/42572)
**Author:** [@danjde](https://help.nextcloud.com/u/danjde)\ **Replies:** 1\ **Last updated:** [December 4, 2018, 10:30pm UTC](https://help.nextcloud.com/t/modsecurity-error-partial-results-are-valid-but-processing-is-incomplete/42572 "2018-12-04T22:30:27Z")
Support introNextcloud version 13.0.1 Operating system and version Debian Jessie Apache version 2.4.10-10+deb8u11 PHP version 5.6.38-0+deb8u1 libapache2-modsecurity 2.8.0-3 Hi Friends, I’m having some issues by Mod… --- ## [Cant log in but get: ModSecurity: XML: Unable to evaluate xpath expression](https://help.nextcloud.com/t/cant-log-in-but-get-modsecurity-xml-unable-to-evaluate-xpath-expression/38792)
**Author:** [@kevanjr](https://help.nextcloud.com/u/kevanjr)\ **Replies:** 0\ **Last updated:** [October 10, 2018, 9:07am UTC](https://help.nextcloud.com/t/cant-log-in-but-get-modsecurity-xml-unable-to-evaluate-xpath-expression/38792 "2018-10-10T09:07:16Z")
Hello, I have installed NextCloud on a shared server and it went without a hitch. I was able to log in, configure my account and added files. Unfortunately this morning I am unable to log in and get this error when I at…