From 0e98ef8a1b3d750da73a4919b5bda205fe980139 Mon Sep 17 00:00:00 2001
From: Bernard Spil <Sp1l@users.noreply.github.com>
Date: Sat, 19 Sep 2020 13:58:17 +0200
Subject: [PATCH] Fix device enrollment with mod_fcgi

The Nextcloud application requires access to the Authorization header for device enrollment.

Without forwarding the Authorization header to php-fpm from Apache, all device enrollment will fail with the auth flow v2.
---
 admin_manual/installation/source_installation.rst | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/admin_manual/installation/source_installation.rst b/admin_manual/installation/source_installation.rst
index 6773f2c58..dd36ded2a 100644
--- a/admin_manual/installation/source_installation.rst
+++ b/admin_manual/installation/source_installation.rst
@@ -122,6 +122,14 @@ Additional Apache configurations
 
     a2enmod setenvif
 
+  and apply the following modifications the configuration::
+
+    ProxyFCGIBackendType FPM
+    
+    <FilesMatch remote.php>
+      SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1
+    </FilesMatch>
+
 * You must disable any server-configured authentication for Nextcloud, as it
   uses Basic authentication internally for DAV services. If you have turned on
   authentication on a parent folder (via e.g. an ``AuthType Basic``