From 8d086a85dc27a96ed28930c5deb4492936ac28fd Mon Sep 17 00:00:00 2001 From: skjnldsv Date: Tue, 19 May 2026 12:40:30 +0200 Subject: [PATCH] docs(admin): document all four well-known URL redirects The security setup warnings page only listed /.well-known/caldav and /.well-known/carddav. Nextcloud also requires /.well-known/webfinger and /.well-known/nodeinfo to be redirected for federation and server metadata to work correctly. Admins seeing warnings about these URLs were directed to docs that didn't mention them. Updated the section to list all four required well-known redirects with their target paths and a brief description of each. Fixes #6885 Signed-off-by: skjnldsv --- .../security_setup_warnings.rst | 18 ++++++++++++++---- 1 file changed, 14 insertions(+), 4 deletions(-) diff --git a/admin_manual/configuration_server/security_setup_warnings.rst b/admin_manual/configuration_server/security_setup_warnings.rst index 81d430c634e..711b831309f 100644 --- a/admin_manual/configuration_server/security_setup_warnings.rst +++ b/admin_manual/configuration_server/security_setup_warnings.rst @@ -115,11 +115,21 @@ websites. To ensure that Nextcloud will work properly you need to update OpenSSL to at least 1.0.2b or 1.0.1d. For NSS the patch version depends on your distribution and an heuristic is running the test which actually reproduces the bug. -Your Web server is not set up properly to resolve /.well-known/caldav/ or /.well-known/carddav/ ------------------------------------------------------------------------------------------------ +Your Web server is not set up properly to resolve /.well-known/ URLs +-------------------------------------------------------------------- -Both URLs need to be correctly redirected to the DAV endpoint of Nextcloud. Please -refer to :ref:`service-discovery-label` for more info. +The following well-known URLs must be correctly redirected for full Nextcloud functionality: + +* ``/.well-known/caldav`` → ``/remote.php/dav`` (CalDAV service discovery) +* ``/.well-known/carddav`` → ``/remote.php/dav`` (CardDAV service discovery) +* ``/.well-known/webfinger`` → ``/index.php/.well-known/webfinger`` (identity/federation) +* ``/.well-known/nodeinfo`` → ``/index.php/.well-known/nodeinfo`` (server metadata) + +The CalDAV and CardDAV redirects are required for calendar and contacts clients that use +automatic service discovery. The WebFinger and NodeInfo redirects are used for federation +and profile discovery between Nextcloud instances and compatible services. + +Please refer to :ref:`service-discovery-label` for setup instructions for Apache and NGINX. Some files have not passed the integrity check ----------------------------------------------