From 057b608c7cf7dd74d4d35a94625b4465d0a912d2 Mon Sep 17 00:00:00 2001 From: Rello Date: Fri, 11 Aug 2023 10:53:24 +0200 Subject: [PATCH 1/4] Update harden_server.rst Signed-off-by: Rello --- admin_manual/installation/harden_server.rst | 13 ++++++++----- 1 file changed, 8 insertions(+), 5 deletions(-) diff --git a/admin_manual/installation/harden_server.rst b/admin_manual/installation/harden_server.rst index 6c5b74f16..165973a17 100644 --- a/admin_manual/installation/harden_server.rst +++ b/admin_manual/installation/harden_server.rst @@ -240,13 +240,16 @@ Some Nextcloud functionality requires connecting to remote servers. Depending on your server setup those are possible connections: - www.nextcloud.com, www.startpage.com, www.eff.org, www.edri.org for checking the internet connection -- apps.nextcloud.com for the available apps -- updates.nextcloud.com for Nextcloud updates -- lookup.nextcloud.com For updating and lookup in the federated sharing addressbook -- push-notifications.nextcloud.com for sending push notifications to mobile clients -- surveyserver.nextcloud.com if the admin has agreed to share anonymized data +- cloud.nextcloud.com (https) for validating the enterprise subscription +- apps.nextcloud.com (https) for available apps and their updates + - github.com (https) for downloading Nextcloud standard apps +- updates.nextcloud.com (https) for Nextcloud updates +- lookup.nextcloud.com (https) for updating and lookup in the federated sharing addressbook +- push-notifications.nextcloud.com (https) for sending push notifications to mobile clients +- surveyserver.nextcloud.com (https) if the admin has agreed to share anonymized data - Any remote Nextcloud server that is connected with federated sharing + Setup fail2ban -------------- From 1eda3a1fdcc1761f4cdbd1d03b58cc8f08a2f8d7 Mon Sep 17 00:00:00 2001 From: Rello Date: Fri, 11 Aug 2023 12:21:02 +0200 Subject: [PATCH 2/4] Update admin_manual/installation/harden_server.rst Co-authored-by: Simon L. Signed-off-by: Rello --- admin_manual/installation/harden_server.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/admin_manual/installation/harden_server.rst b/admin_manual/installation/harden_server.rst index 165973a17..cd88fb10d 100644 --- a/admin_manual/installation/harden_server.rst +++ b/admin_manual/installation/harden_server.rst @@ -242,7 +242,7 @@ your server setup those are possible connections: - www.nextcloud.com, www.startpage.com, www.eff.org, www.edri.org for checking the internet connection - cloud.nextcloud.com (https) for validating the enterprise subscription - apps.nextcloud.com (https) for available apps and their updates - - github.com (https) for downloading Nextcloud standard apps +- github.com (https) for downloading Nextcloud standard apps - updates.nextcloud.com (https) for Nextcloud updates - lookup.nextcloud.com (https) for updating and lookup in the federated sharing addressbook - push-notifications.nextcloud.com (https) for sending push notifications to mobile clients From 1ca78359795a743a6d20d700fe171832f0257928 Mon Sep 17 00:00:00 2001 From: Rello Date: Fri, 11 Aug 2023 13:22:49 +0200 Subject: [PATCH 3/4] Update admin_manual/installation/harden_server.rst Co-authored-by: Simon L. Signed-off-by: Rello --- admin_manual/installation/harden_server.rst | 1 - 1 file changed, 1 deletion(-) diff --git a/admin_manual/installation/harden_server.rst b/admin_manual/installation/harden_server.rst index cd88fb10d..9b108ce9a 100644 --- a/admin_manual/installation/harden_server.rst +++ b/admin_manual/installation/harden_server.rst @@ -249,7 +249,6 @@ your server setup those are possible connections: - surveyserver.nextcloud.com (https) if the admin has agreed to share anonymized data - Any remote Nextcloud server that is connected with federated sharing - Setup fail2ban -------------- From 1a8860c73ff2e20dcf3819ccb75da7f505adcbf3 Mon Sep 17 00:00:00 2001 From: Rello Date: Mon, 21 Aug 2023 10:54:37 +0200 Subject: [PATCH 4/4] Update harden_server.rst Signed-off-by: Rello --- admin_manual/installation/harden_server.rst | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/admin_manual/installation/harden_server.rst b/admin_manual/installation/harden_server.rst index 9b108ce9a..cdfc07a95 100644 --- a/admin_manual/installation/harden_server.rst +++ b/admin_manual/installation/harden_server.rst @@ -236,17 +236,18 @@ security headers are shipped. Connections to remote servers ----------------------------- -Some Nextcloud functionality requires connecting to remote servers. Depending on -your server setup those are possible connections: +Some Nextcloud functionalites require connecting to remote servers. Depending on +your server setup, these are the possible connections: - www.nextcloud.com, www.startpage.com, www.eff.org, www.edri.org for checking the internet connection - cloud.nextcloud.com (https) for validating the enterprise subscription +- updates.nextcloud.com (https) for Nextcloud server updates +- push-notifications.nextcloud.com (https) for sending push notifications to mobile clients +- pushfeed.nextcloud.com (https) for the Nextcloud announcements app +- lookup.nextcloud.com (https) for updating and lookups to the federated sharing addressbook +- surveyserver.nextcloud.com (https) if the admin has agreed to share anonymized data - apps.nextcloud.com (https) for available apps and their updates - github.com (https) for downloading Nextcloud standard apps -- updates.nextcloud.com (https) for Nextcloud updates -- lookup.nextcloud.com (https) for updating and lookup in the federated sharing addressbook -- push-notifications.nextcloud.com (https) for sending push notifications to mobile clients -- surveyserver.nextcloud.com (https) if the admin has agreed to share anonymized data - Any remote Nextcloud server that is connected with federated sharing Setup fail2ban