Merge pull request #12505 from nextcloud/fix/warning-hsts-debugging

chore: Add header check instructions to HSTS warning section
This commit is contained in:
Daniel 2025-01-13 12:36:57 +01:00 committed by GitHub
commit 02c8f716ac
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -77,6 +77,9 @@ For enhanced security we recommend enabling HSTS as described in our security ti
The HSTS header needs to be configured within your Web server by following the
:ref:`enable-hsts-label` documentation
You can see if the header is appearing in requests by using your browser inspector
or using a tool such as cURL: ``curl --head https://cloud.domain.tld``.
/dev/urandom is not readable by PHP
-----------------------------------