<h2>Editing File: /var/softaculous/nextcloud/.htaccess</h2><form method='post'><textarea name='content' class='file-edit'>&lt;IfModule mod_headers.c&gt;
    &lt;IfModule mod_setenvif.c&gt;
        &lt;IfModule mod_fcgid.c&gt;
            SetEnvIfNoCase ^Authorization$ &quot;(.+)&quot; XAUTHORIZATION=$1
            RequestHeader set XAuthorization %{XAUTHORIZATION}e env=XAUTHORIZATION
        &lt;/IfModule&gt;
        &lt;IfModule mod_proxy_fcgi.c&gt;
            SetEnvIfNoCase Authorization &quot;(.+)&quot; HTTP_AUTHORIZATION=$1
        &lt;/IfModule&gt;
        &lt;IfModule mod_lsapi.c&gt;
            SetEnvIfNoCase ^Authorization$ &quot;(.+)&quot; XAUTHORIZATION=$1
            RequestHeader set XAuthorization %{XAUTHORIZATION}e env=XAUTHORIZATION
        &lt;/IfModule&gt;
    &lt;/IfModule&gt;

    &lt;IfModule mod_env.c&gt;
        # Add security and privacy related headers
        # Avoid doubled headers by unsetting headers in &quot;onsuccess&quot; table,
        # then add headers to &quot;always&quot; table: https://github.com/nextcloud/server/pull/19002

        &lt;If &quot;%{REQUEST_URI} =~ m#/login$#&quot;&gt;
            # Only on the login page we need any Origin or Referer header set.
            Header onsuccess unset Referrer-Policy
            Header always set Referrer-Policy &quot;same-origin&quot;
        &lt;/If&gt;
        &lt;Else&gt;
            Header onsuccess unset Referrer-Policy
            Header always set Referrer-Policy &quot;no-referrer&quot;
        &lt;/Else&gt;

        Header onsuccess unset X-Content-Type-Options
        Header always set X-Content-Type-Options &quot;nosniff&quot;

        Header onsuccess unset X-Frame-Options
        Header always set X-Frame-Options &quot;SAMEORIGIN&quot;

        Header onsuccess unset X-Permitted-Cross-Domain-Policies
        Header always set X-Permitted-Cross-Domain-Policies &quot;none&quot;

        Header onsuccess unset X-Robots-Tag
        Header always set X-Robots-Tag &quot;noindex, nofollow&quot;

        SetEnv modHeadersAvailable true
    &lt;/IfModule&gt;

    # Add cache control for static resources
    &lt;FilesMatch &quot;\.(css|js|mjs|svg|gif|png|jpg|webp|ico|wasm|tflite)$&quot;&gt;
        &lt;If &quot;%{QUERY_STRING} =~ /(^|&amp;)v=/&quot;&gt;
            Header set Cache-Control &quot;max-age=15778463, immutable&quot;
        &lt;/If&gt;
        &lt;Else&gt;
            Header set Cache-Control &quot;max-age=15778463&quot;
        &lt;/Else&gt;
    &lt;/FilesMatch&gt;

    # Let browsers cache OTF and WOFF files for a week
    &lt;FilesMatch &quot;\.(otf|woff2?)$&quot;&gt;
        Header set Cache-Control &quot;max-age=604800&quot;
    &lt;/FilesMatch&gt;
&lt;/IfModule&gt;

&lt;IfModule mod_php.c&gt;
    php_value default_charset 'UTF-8'
    php_value output_buffering 0
    &lt;IfModule mod_env.c&gt;
        SetEnv htaccessWorking true
    &lt;/IfModule&gt;
&lt;/IfModule&gt;

&lt;IfModule mod_mime.c&gt;
    AddType image/svg+xml svg svgz
    AddType application/wasm wasm
    AddEncoding gzip svgz
    # Serve ESM javascript files (.mjs) with correct mime type
    AddType text/javascript js mjs
&lt;/IfModule&gt;

&lt;IfModule mod_dir.c&gt;
    DirectoryIndex index.php index.html
&lt;/IfModule&gt;

&lt;IfModule pagespeed_module&gt;
    ModPagespeed Off
&lt;/IfModule&gt;

#############
#### Rewrites
#############

&lt;IfModule mod_rewrite.c&gt;
    RewriteEngine on

##
## Rule: Workaround for WebDAV with apache+php-cgi
##
## Context:
##    - Sets the environment variable `HTTP_AUTHORIZATION` to the value of the `Authorization` request header
##    - Always executed before and along with other rules (no `L` used)
##    - XXX: *May* be replaced with an equivalent SetEnvIf in theory
##    - XXX: SetEnvIf approach is already in use above for mod_proxy_cgi / mod_lsapi / mod_fcgid
##

    RewriteRule .* - [env=HTTP_AUTHORIZATION:%{HTTP:Authorization}]

##
## Rule: Workaround for WebDAV with MS DavClnt
##
## Context: 
##    - DavClnt attempts an OPTIONS request against `/` instead of the specified endpoint
##    - Redirects the client to the endpoint rather than the login page (which confuses DavClnt)
##

    RewriteCond %{HTTP_USER_AGENT} DavClnt
    RewriteRule ^$ /remote.php/webdav/ [L,R=302]

##
## Rule: Map the RFC 8615 / RFC 6764 compliant well-known URI for CardDAV to our Remote DAV endpoint
##

    RewriteRule ^\.well-known/carddav /remote.php/dav/ [R=301,L]

##
## Rule: Map the RFC 8615 / RFC 6764 compliant well-known URI for CalDAV to our Remote DAV endpoint
##

    RewriteRule ^\.well-known/caldav /remote.php/dav/ [R=301,L]

##
## Rule: Map /remote* --&gt; /remote.php* including the query string
##
## Context:
##    - XXX: Is this even used anymore? Seems a relic from &lt;NC12
##

    RewriteRule ^remote/(.*) remote.php [L]

##
## Rule: Prevent access to non-public files
##

    RewriteRule ^(?:build|tests|config|lib|3rdparty|templates)/.* - [R=404,L]

##
## Rule: Maps most RFC 8615 compliant well-known URIs to our main frontend controller (/index.php) by default
##
## Context:
##    - Intentionally excludes URIs used for HTTPS certificate verifications
##        - RFC 8555 / ACME HTTP Challenges (acme-challenge) 
##        - File-based Validations (pki-validation)
##    - XXX: Sometimes we are using `/index.php` and other times `index.php` as our replacement URI; this may be incorrect
##

    RewriteRule ^\.well-known/(?!acme-challenge|pki-validation) /index.php [L]

##
## Rule: Map the ocm-provider handling to our main frontend controller (/index.php)
##
## Context:
##    - XXX: Sometimes we are using `/index.php` and other times `index.php` as our replacement URI; this may be incorrect
##

    RewriteRule ^ocm-provider/?$ index.php [L]

##
## Rule: Prevent access to more non-public files
##
## Context:
##    - XXX It may make sense to merge some of these with the others (i.e. the ones that don't need to be last)
##

    RewriteRule ^(?:\.(?!well-known)|autotest|occ|issue|indie|db_|console).* - [R=404,L]

&lt;/IfModule&gt;

# Clients like xDavv5 on Android, or Cyberduck, use chunked requests.
# When FastCGI or FPM is used with apache, requests arrive to Nextcloud without any content.
# This leads to the creation of empty files.
# The following directive will force the problematic requests to be buffered before being forwarded to Nextcloud.
# This way, the &quot;Transfer-Encoding&quot; header is removed, the &quot;Content-Length&quot; header is set, and the request content is proxied to Nextcloud.
# Here are more information about the issue:
#  - https://docs.cyberduck.io/mountainduck/issues/fastcgi/
#  - https://docs.nextcloud.com/server/latest/admin_manual/issues/general_troubleshooting.html#troubleshooting-webdav

&lt;IfModule mod_setenvif.c&gt;
    SetEnvIfNoCase Transfer-Encoding &quot;chunked&quot; proxy-sendcl=1
&lt;/IfModule&gt;

# Apache disabled the sending of the server-side content-length header
# in their 2.4.59 patch updated which breaks some use-cases in Nextcloud.
# Setting ap_trust_cgilike_cl allows to bring back the usual behaviour.
# See https://bz.apache.org/bugzilla/show_bug.cgi?id=68973

&lt;IfModule mod_env.c&gt;
    SetEnv ap_trust_cgilike_cl
&lt;/IfModule&gt;

AddDefaultCharset utf-8
Options -Indexes
#### DO NOT CHANGE ANYTHING ABOVE THIS LINE ####

ErrorDocument 403 [[relativeurl]]/index.php/error/403
ErrorDocument 404 [[relativeurl]]/index.php/error/404
</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fvar%2Fsoftaculous%2Fnextcloud'>Back to Directory</a>