Adapt Updates to nginx configuration

[BernieO]

Signed-off-by: Bernhard Ostertag bernieo.github@gmx.de

Nextcloud 17 adds the Same-Origin header which was removed with Nextcloud 12.
ref #1597 (which should IMHO be merged before release of Nextcloud 17)

[J0WI]

Should we also document the new always attribute for security headers?

[J0WI]

🏓 @nickvergessen this should be mentioned in the release notes

[J0WI]

@BernieO could you sign-off your commits?

[nickvergessen]

Also the try_files changes are missing from there

[BernieO]

could you sign-off your commits?

@J0WI I thought I did sign-off the commit.
Is signing-off more than putting Signed-off-by: NAME <MAIL@EXAMPLE.COM> in the commit message?

I am sorry, if I did something wrong. I would also be happy to create a new pull request signed-off (once I know how to do that).

[kesselb]

Thanks 👍

[J0WI]

/backport to stable17

[backportbot-nextcloud]

backport to stable17 in #1713

[jknockaert]

I think the documentation should be updated as well. In fact it tells users to do the exact opposite of what it should be: https://docs.nextcloud.com/server/17/admin_manual/release_notes.html

[jknockaert]

Sorry, I was confused. The PR is doing exactly what I was suggesting here. Forget about my remark.
Thanks for fixing it.