So this morning i’m testing with
v2.4.0-beta.2 h1:DUaK4qtL3T0/gAm0fVVkHgcMN04r4zGpfPUZWHRR8QU=
from github. Maybe i’m doing something wrong but i still need the filematcher for remote.php and rewrite rule for nextcloud to work.
Also the nextcloud desktop app can’t connect/auth to my server. I didn’t test the desktop app yesterday, so propably it wouldn’t have yesterday either. The error the desktop app shows is
Error accessing token endpoint
Error transferring https://sub.domain.tld/index.php/login/v2 - server replied: Forbidden
Browser access is working fine i can browse nextcloud, edit settings etc. The urls are like sub.domain.com/login/ or sub.domain.com/apps/dashboard etc.
Again, current config is
sub.domain.com {
# logging
import slog
root * /var/www/nextcloud
file_server
encode gzip zstd
php_fastcgi unix//var/run/php/php8.0-fpm.sock {
env PATH /bin
env front_controller_active true
}
header {
# enable HSTS
Strict-Transport-Security max-age=31536000;
}
redir /.well-known/carddav /remote.php/dav 301
redir /.well-known/caldav /remote.php/dav 301
# .htaccess / data / config / ... shouldn't be accessible from outside
@forbidden {
path /.htaccess
path /data/*
path /config/*
path /db_structure
path /.xml
path /README
path /3rdparty/*
path /lib/*
path /templates/*
path /occ
path /console.php
}
respond @forbidden "@forbidden"
# allow remote.php and others to be served by fpm
@phpFiles {
path_regexp phpfile ^/(remote|public|cron|core/ajax/update|status|ocs/v1|ocs/v2)\.php
}
rewrite @phpFiles {http.regexp.phpfile.0}
}
I don’t know why the brwoser app is working, but the desktop app isn’t. And since you said it it shouldn’t need the matcher for remote.php, i don’t know why that isn’t working either. Sorry.