From 756a4961034f7f00a0b30fe55cd049e5a3a86bda Mon Sep 17 00:00:00 2001
From: Wonderfall <wonderfall@schrodinger.io>
Date: Wed, 13 Apr 2016 13:52:19 +0200
Subject: [PATCH] owncloud: update nginx.conf

---
 owncloud/nginx.conf | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/owncloud/nginx.conf b/owncloud/nginx.conf
index 9f53b05..c567bf9 100644
--- a/owncloud/nginx.conf
+++ b/owncloud/nginx.conf
@@ -14,10 +14,6 @@ http {
 
     access_log off;
     error_log /var/log/nginx/error.log error;
-    add_header Strict-Transport-Security "max-age=15552000; includeSubdomains; preload;";
-    add_header X-Frame-Options SAMEORIGIN;
-    add_header X-Content-Type-Options nosniff;
-    add_header X-XSS-Protection "1; mode=block";
 
     sendfile on;
     keepalive_timeout 15;
@@ -61,6 +57,11 @@ http {
         rewrite ^/webdav(.*)$ /remote.php/webdav$1 redirect;
         error_page 403 /core/templates/403.php;
         error_page 404 /core/templates/404.php;
+        
+        add_header Strict-Transport-Security "max-age=15552000; includeSubdomains; preload;";
+        add_header X-Frame-Options SAMEORIGIN;
+        add_header X-Content-Type-Options nosniff;
+        add_header X-XSS-Protection "1; mode=block";
 
         location = /robots.txt {
             allow all;