Last updated: 2023-08-16 00:00:00
My Caddyfile looks like this:
{ encode gzip root * /usr/share/webapps/nextcloud file_server php_fastcgi * unix//run/php-legacy-fpm/nextcloud.sock { env front_controller_active true # Remove index.php form url } header { Strict-Transport-Security max-age=31536000; # enable HSTS } redir /.well-known/carddav /remote.php/dav 301 redir /.well-known/caldav /remote.php/dav 301 # .htaccess / data / config / ... shouldn't be accessible from outside @forbidden { path /.htaccess path /data/* path /config/* path /db_structure path /.xml path /README path /3rdparty/* path /lib/* path /templates/* path /occ path /console.php } respond @forbidden 404 #header X-Robots-Tag '"noindex, nofollow" always' }