Skip to content

Make security.txt configurable via config.php - #66009

Open
printminion-co wants to merge 1 commit into
nextcloud:masterfrom
IONOS-Productivity:feat/settings-configurable-security-txt
Open

printminion-co wants to merge 1 commit into
nextcloud:masterfrom
IONOS-Productivity:feat/settings-configurable-security-txt

Conversation

@printminion-co

Copy link
Copy Markdown
Contributor

Add the security_txt system config value. When set, it is served verbatim at /.well-known/security.txt; when unset or blank, the existing Nextcloud default is served, so behaviour does not change.

This lets instances publish their own security contact instead of Nextcloud GmbH's.

Summary

TODO

  • ...

Checklist

AI (if applicable)

  • The content of this PR was partly or fully generated using AI

Add the `security_txt` system config value. When set, it is served
verbatim at /.well-known/security.txt; when unset or blank, the existing
Nextcloud default is served, so behaviour does not change.

This lets instances publish their own security contact instead of
Nextcloud GmbH's.

Signed-off-by: Misha M.-Kupriyanov <kupriyanov@strato.de>
Assisted-by: ClaudeCode:claude-sonnet-5-5
@printminion-co
printminion-co force-pushed the feat/settings-configurable-security-txt branch from d3c9e65 to e1f34aa Compare November 3, 2026 09:25
return $previousResponse;
}

$response = trim($this->config->getSystemValueString('security_txt', ''));

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let's store the value as an app config instead

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants