Question Can't locate Apache config file

[Jean-Luc GARNIER]

Hi Community,

This is a rookie question... ;-) To harden nextCloud security, the installation manual indicates I should add some parameters to Apache config file:

<VirtualHost *:443>
ServerName cloud.nextcloud.com
<IfModule mod_headers.c>
Header always set Strict-Transport-Security "max-age=15552000; includeSubDomains"
</IfModule>
</VirtualHost>

Unfortunately, I spent hours searching for this file and couldn't find the proper one. Any clue on this in a Plesk context? Where should I these extra instructions?

Thanks in advance for any help!

 

[Brujo]

If you like to do it for a specified Domain, for example like this goto your Plesk Panel > Domain > Apache & Nginx Settings
How to enable HTTP Strict-Transport-Security (HSTS) for a domain on the Plesk server?
Search Results for Query: Header always set Strict-Transport-Security | Plesk Forum

 

[Jean-Luc GARNIER]

Thanks a lot! This looks like the post I was looking for!