slfhst/ansible
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

⚡: improve nextcloud config
All checks were successful
ansible-lint / lint-everything (push) Successful in 5s
Details

Browse Source
This commit is contained in:
VC
2025-03-11 09:23:15 +01:00
parent 4f78531414
commit c4b1ff1e48
4 changed files with 6 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
roles/nextcloud/tasks/nextcloud.yml
View File

@@ -28,9 +28,9 @@
ansible.builtin.file: ansible.builtin.file:
state: directory state: directory
dest: "{{ nextcloud_app_home }}/{{ item }}" dest: "{{ nextcloud_app_home }}/{{ item }}"
owner: root owner: www-data
group: www-data group: www-data
mode: "g+w" mode: "a-rwx,u+rwX,g+rX"
recurse: true recurse: true
loop: "{{ nextcloud_writable_app_dirs }}" loop: "{{ nextcloud_writable_app_dirs }}"

2
roles/nginx/templates/vhosts/o.libertus.eu.conf.j2
View File

@@ -53,7 +53,7 @@ server {
add_header X-Download-Options "noopen" always; add_header X-Download-Options "noopen" always;
add_header X-Frame-Options "SAMEORIGIN" always; add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-Permitted-Cross-Domain-Policies "none" always; add_header X-Permitted-Cross-Domain-Policies "none" always;
add_header X-Robots-Tag "none" always; add_header X-Robots-Tag "noindex,nofollow" always;
add_header X-XSS-Protection "1; mode=block" always; add_header X-XSS-Protection "1; mode=block" always;
# Remove X-Powered-By, which is an information leak # Remove X-Powered-By, which is an information leak

4
roles/php/templates/php.ini.j2
View File

@@ -1797,10 +1797,10 @@ ldap.max_links = -1
;opcache.enable_cli=0 ;opcache.enable_cli=0
; The OPcache shared memory storage size. ; The OPcache shared memory storage size.
;opcache.memory_consumption=128 opcache.memory_consumption=256
; The amount of memory for interned strings in Mbytes. ; The amount of memory for interned strings in Mbytes.
;opcache.interned_strings_buffer=8 opcache.interned_strings_buffer=16
; The maximum number of keys (scripts) in the OPcache hash table. ; The maximum number of keys (scripts) in the OPcache hash table.
; Only numbers between 200 and 1000000 are allowed. ; Only numbers between 200 and 1000000 are allowed.

1
roles/php/templates/www.conf.j2
View File

@@ -9,3 +9,4 @@ pm.max_children = 100
pm.start_servers = 10 pm.start_servers = 10
pm.min_spare_servers = 10 pm.min_spare_servers = 10
pm.max_spare_servers = 30 pm.max_spare_servers = 30
clear_env = no