Nextcloud with Let's Encrypt Using Docker Compose

nextcloud-traefik-letsencrypt-docker-compose.yml

@@ -193,12 +193,17 @@ services:
       - "traefik.http.routers.nextcloud.tls=true"
       - "traefik.http.routers.nextcloud.tls.certresolver=letsencrypt"
       - "traefik.http.services.nextcloud.loadbalancer.passhostheader=true"
-      - "traefik.http.routers.nextcloud.middlewares=compresstraefik,sts-headers,dav-discovery"
+      - "traefik.http.middlewares.nextcloud-securityheaders.headers.stsSeconds=15552000"
+      - "traefik.http.middlewares.nextcloud-securityheaders.headers.stsIncludeSubdomains=true"
+      - "traefik.http.middlewares.nextcloud-securityheaders.headers.stsPreload=true"
+      - "traefik.http.routers.nextcloud.middlewares=nextcloud-redirectregex1,nextcloud-redirectregex2,compresstraefik,nextcloud-securityheaders"
+      - "traefik.http.middlewares.nextcloud-redirectregex1.redirectregex.permanent=true"
+      - "traefik.http.middlewares.nextcloud-redirectregex1.redirectregex.regex=https?://([^/]*)/.well-known/(card|cal)dav"
+      - "traefik.http.middlewares.nextcloud-redirectregex1.redirectregex.replacement=https://$${1}/remote.php/dav/"
+      - "traefik.http.middlewares.nextcloud-redirectregex2.redirectregex.permanent=true"
+      - "traefik.http.middlewares.nextcloud-redirectregex2.redirectregex.regex=https?://([^/]*)(/.well-known[^#]*)"
+      - "traefik.http.middlewares.nextcloud-redirectregex2.redirectregex.replacement=https://$${1}/index.php$${2}"
       - "traefik.http.middlewares.compresstraefik.compress=true"
-      - "traefik.http.middlewares.sts-headers.headers.stsSeconds=15552000"
-      - "traefik.http.middlewares.sts-headers.headers.stsIncludeSubdomains=true"
-      - "traefik.http.middlewares.dav-discovery.replacepathregex.regex=^/.well-known/(card|cal)dav"
-      - "traefik.http.middlewares.dav-discovery.replacepathregex.replacement=/remote.php/dav/"
       - "traefik.docker.network=traefik-network"
     restart: unless-stopped
     depends_on: