From 47afcdc50e7a9f761c9a6f586f369be780b3bad6 Mon Sep 17 00:00:00 2001
From: Marko Korhonen <marko@korhonen.cc>
Date: Thu, 23 Mar 2023 11:08:41 +0200
Subject: [PATCH] Add X-Robots header to nextcloud

---
 docker/nextcloud/docker-compose.toml | 2 +-
 docker/traefik/dynamic.toml          | 3 +++
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/docker/nextcloud/docker-compose.toml b/docker/nextcloud/docker-compose.toml
index 113b3f32..24d58518 100644
--- a/docker/nextcloud/docker-compose.toml
+++ b/docker/nextcloud/docker-compose.toml
@@ -18,7 +18,7 @@ labels = [
   "traefik.http.routers.nextcloud.entrypoints=https",
   "traefik.http.routers.nextcloud.rule=Host(`cloud.korhonen.cc`)",
   "traefik.http.routers.nextcloud.service=nextcloud",
-  "traefik.http.routers.nextcloud.middlewares=secHeaders@file,nextcloud-redirect-dav@file,nextcloud-redirect-extra@file,compress@file",
+  "traefik.http.routers.nextcloud.middlewares=secHeaders@file,nextcloud-security-headers@file,nextcloud-redirect-dav@file,nextcloud-redirect-extra@file,compress@file",
   "traefik.docker.network=proxy",
   "traefik.http.services.nextcloud.loadbalancer.server.port=80",
 ]
diff --git a/docker/traefik/dynamic.toml b/docker/traefik/dynamic.toml
index d2f46eea..22dfe112 100644
--- a/docker/traefik/dynamic.toml
+++ b/docker/traefik/dynamic.toml
@@ -63,6 +63,9 @@ permanent = true
 regex = "https://(.*)/.well-known/(webfinger|nodeinfo)"
 replacement = "https://${1}/index.php/.well-known/${2}"
 
+[http.middlewares.nextcloud-security-headers.headers.customResponseHeaders]
+X-Robots-Tag = "noindex,nofollow"
+
 [http.middlewares.www2non-www.redirectregex]
 permanent = true
 regex = "^https?://www\\.(.+)"