docs(admin): document all four well-known URL redirects#14910
Open
skjnldsv wants to merge 1 commit into
Open
Conversation
The security setup warnings page only listed /.well-known/caldav and /.well-known/carddav. Nextcloud also requires /.well-known/webfinger and /.well-known/nodeinfo to be redirected for federation and server metadata to work correctly. Admins seeing warnings about these URLs were directed to docs that didn't mention them. Updated the section to list all four required well-known redirects with their target paths and a brief description of each. Fixes #6885 Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
Contributor
📖 Documentation Preview📄 1 changed documentation pageLast updated: Tue, 19 May 2026 10:58:03 GMT |
provokateurin
requested changes
May 19, 2026
Comment on lines
+125
to
+126
| * ``/.well-known/webfinger`` → ``/index.php/.well-known/webfinger`` (identity/federation) | ||
| * ``/.well-known/nodeinfo`` → ``/index.php/.well-known/nodeinfo`` (server metadata) |
Member
There was a problem hiding this comment.
This looks wrong, there shouldn't be a redirect here.
Member
Author
There was a problem hiding this comment.
You mean we should have a redirect for that nodeinfo thing ?
I found this in the server code 🤔
https://github.com/nextcloud/server/blob/926cecba3c3924acbc3fec5573dc808119ec27f8/apps/settings/lib/SetupChecks/WellKnownUrls.php#L52
skjnldsv
requested review from
ArtificialOwl,
hamza221,
icewind1991,
kesselb and
st3iny
Member
Author
|
Added some groupware team members as this also touch some groupware endpoints |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
☑️ Resolves
Summary
The security setup warnings page only documented
/.well-known/caldavand/.well-known/carddav. Nextcloud also emits warnings for/.well-known/webfingerand
/.well-known/nodeinfowhen those redirects are missing. Admins following thehelp link from those warnings arrived at a page that didn't mention them at all.
Changes:
The rewrite rules themselves are already documented in
general_troubleshooting.rst;this PR only fixes the warning page that users land on first.
🖼️ Screenshots
✅ Checklist
codespellor similar and addressed any spelling issues