Nextcloud security problems

[efesto85]

Hello everyone, today while checking nextcloud I noticed that overview section in settings I read these messages

There are some errors regarding your setup.

• Your data directory and files are probably accessible from the internet. The .htaccess file is not working. It is strongly recommended that you configure your web server so that the data directory is no longer accessible, or move the data directory outside the web server document root.

• Your web server is not properly set up to resolve .well-known URLs, failed on: /.well-known/caldav For more details see the documentation .

• 10 warnings in the logs since July 8, 2024, 10:48:33 PM{“2”:10,“3”:0,“4”:0}

• Integrity checker has been disabled. Integrity cannot be verified.

• Your installation has no default phone region set. This is required to validate phone numbers in the profile settings without a country code. To allow numbers without a country code, please add “default_phone_region” with the respective ISO 3166-1 code of the region to your config file. For more details see the documentation .

Please double check the installation guides , and check for any errors or warnings in the log.

Check the security of your Nextcloud over our security scan .

I have always made all the updates without changing anything in particular

Thanks in advance

My YunoHost server

**Hardware: Old laptop or computer
YunoHost version: 11.2.20.2 (stable).
**I have access to my se :Through SSH | through the webadmin | direct access via keyboard
Are you in a special context or did you perform some particular tweaking on your YunoHost instance ? : no
*If your request is related to an app, specify its name and version: nextcloud_29.0.2~ynh1

[jarod5001]

This issue has been discussed here in French Fichiers exposés après mise à jour de nextcloud?

The summary is that the check mechanism in nextcloud has a bug that will be fixed in 29.0.4, there is no security problem if your installation has not been altered manually.