[05:51:24]
<@claush:matrix.org> Hello, my Nextcloud-Instance (29.0.10, running on yunohost 12.0.8.2) states "Your data directory and files are probably accessible from the internet. The .htaccess file is not working. It is strongly recommended that you configure your web server so that the data directory is no longer accessible, or move the data directory outside the web server document root." since some time. I tried to access the data via URL like https://<domain>/data/<username>/files/<existing_file> which luckily didn't succeed. Is it safe to ignore this warning since the data directory is not the web root? Or should I take some actions?
[06:45:20]
<@claush:matrix.org> tituspijean: Thank you!
[06:45:21]
<tituspijean> You can indeed ignore it, but if you want that warning gone IIRC you would need to remove "localhost" from the list of "trusted_domains" in nextcloud's config.php
[16:01:30]
<Aleks (he/him/il/lui)> by default it is empty / nonexistent
[16:01:30]
<Aleks (he/him/il/lui)> (empty as is empty json, `{}`)
[16:02:55]
<nicofrand> works directly without any restart, great
[16:02:55]
<nicofrand> Do I need to restart a service or something after that?
[16:02:55]
<nicofrand> Hi! Is there a blank/unedited conf.persistent.json somewhere? Or is it possible to regenerate it? I don't remember editing mine but I'd like to be sure it is not (following https://github.com/YunoHost/issues/issues/2493)
[16:02:56]
<nicofrand> Thanks, I'll reset it to `{}` then
[22:04:25]
<Xabi> Hi,
Ever since fiddling with SNI based forwarding (serves me well) I seem to be unable to install new apps (tbc). Today [Synapse's update failed](https://paste.yunohost.org/raw/upeqazehic) and I [cannot install new ones](https://paste.yunohost.org/raw/qiboyagara) either. Could you please have a look at the logs? I could roll back to a previous snapshot, so no pressure.
Also, SNI's UI says that values should be semicolon separated, but this creates 3 different tags — one for the IP, another for the URL, and a third for the port. I believe they should stay together.
[22:16:04]
<Aleks (he/him/il/lui)> what's on line 6 in that file ?
[22:16:04]
<Aleks (he/him/il/lui)> ` unexpected ";" in /etc/nginx/modules-enabled/tls_passthrough.conf:6`
[22:17:48]
<Xabi> Baimena aldatu da? Permission has been changed
[22:23:04]
<Xabi> (I take you’re talking about the config file. Line 6 is just a semicolon. Nothing else. Lemme try to show it
[22:24:23]
<Xabi> `
stream {
map $ssl_preread_server_name $name {
;
default https_default_backend;
}
`
[22:26:30]
<Aleks (he/him/il/lui)> so you tried to disable the SNI mechanism by removing the domain/IP association but did not actually toggle off the "Enable SNI/TLS passthrough" option probably ?
[22:28:10]
<Xabi> Oh I see. I disabled advance sec features, but the SNI is still on on Others
[22:45:34]
<Xabi> Once disabled both toggles I can install the app
[22:45:35]
<Xabi> Thank you
[22:46:24]
<Xabi> Does this mean that the values added for SNI are written in that config file? One per line maybe?
[22:46:54]
<Aleks (he/him/il/lui)> yes
[22:48:43]
<Xabi> And also, I take enabling SNI doesn't get in the way of installing or updating apps, so what was the problem, the lonely semicolon? If the line had 10.0.10.1;domain.lrd:443 would synapse's update be successful?
[22:49:46]
<Aleks (he/him/il/lui)> yes
[23:06:10]
<Xabi> One last question: does the redirect app still work when SNI is enabled?
[23:06:58]
<Aleks (he/him/il/lui)> don't see why it shouldnt
[23:07:17]
<Aleks (he/him/il/lui)> but just like for anything with computers, devil is in the details
[23:07:45]
<Xabi> Alright. Thanks