# Nextcloud security problems

**URL:** <https://forum.yunohost.org/t/nextcloud-security-problems/30431>\
**Category:** Support apps\
**Tags:** nextcloud, english\
**Created:** [July 15, 2024, 9:01pm UTC](https://forum.yunohost.org/t/nextcloud-security-problems/30431 "2024-07-15T21:01:34Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![efesto85](https://forum.yunohost.org/letter_avatar_proxy/v4/letter/e/3d9bf3/32.png) [@efesto85](https://forum.yunohost.org/u/efesto85)\
**Post date:** [July 15, 2024, 9:01pm UTC](https://forum.yunohost.org/t/nextcloud-security-problems/30431/1 "2024-07-15T21:01:34Z")

</div>

Hello everyone, today while checking nextcloud I noticed that overview section in settings I read these messages

> There are some errors regarding your setup.
> 
> - Your data directory and files are probably accessible from the internet. The .htaccess file is not working. It is strongly recommended that you configure your web server so that the data directory is no longer accessible, or move the data directory outside the web server document root.
> 
> - Your web server is not properly set up to resolve `.well-known` URLs, failed on: `/.well-known/caldav` For more details see the [documentation ↗](https://docs.nextcloud.com/server/29/go.php?to=admin-setup-well-known-URL).
> 
> - 10 warnings in the logs since July 8, 2024, 10:48:33 PM{“2”:10,“3”:0,“4”:0}
> 
> - Integrity checker has been disabled. Integrity cannot be verified.
> 
> - Your installation has no default phone region set. This is required to validate phone numbers in the profile settings without a country code. To allow numbers without a country code, please add “default\_phone\_region” with the respective ISO 3166-1 code of the region to your config file. For more details see the [documentation ↗](https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2#Officially_assigned_code_elements).
> 
> Please double check the [installation guides ↗](https://docs.nextcloud.com/server/29/go.php?to=admin-install), and check for any errors or warnings in the [log](https://mywebsitenextcloud/settings/admin/logging).
> 
> Check the security of your Nextcloud over [our security scan ↗](https://scan.nextcloud.com).

I have always made all the updates without changing anything in particular

Thanks in advance

### My YunoHost server

\*\*Hardware: Old laptop or computer  
**YunoHost version:** 11.2.20.2 (stable).  
\*\*I have access to my se :Through SSH | through the webadmin | direct access via keyboard  
**Are you in a special context or did you perform some particular tweaking on your YunoHost instance ?** : no  
\*_If your request is related to an app, specify its name and version:_ nextcloud\_29.0.2~ynh1

---

<div class="post-metadata">

**Author:** ![jarod5001](https://forum.yunohost.org/user_avatar/forum.yunohost.org/jarod5001/32/5323_2.png) [@jarod5001](https://forum.yunohost.org/u/jarod5001)\
**Post date:** [July 15, 2024, 9:55pm UTC](https://forum.yunohost.org/t/nextcloud-security-problems/30431/2 "2024-07-15T21:55:05Z")

</div>

This issue has been discussed here in French [Fichiers exposés après mise à jour de nextcloud?](https://forum.yunohost.org/t/fichiers-exposes-apres-mise-a-jour-de-nextcloud/30102/1)

The summary is that the check mechanism in nextcloud has a bug that will be fixed in 29.0.4, there is no security problem if your installation has not been altered manually.

---

<div class="post-metadata">

**Author:** ![system](https://forum.yunohost.org/uploads/default/original/2X/f/f59fe8e3ee6b100b4f574d30d6e30479c68b89f0.png) [@system](https://forum.yunohost.org/u/system)\
**Post date:** [July 30, 2024, 9:55pm UTC](https://forum.yunohost.org/t/nextcloud-security-problems/30431/3 "2024-07-30T21:55:28Z")

</div>

Closed on July 30, 2024, 9:55pm UTC

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.