The "X-Frame-Options" HTTP header is not set to "SAMEORIGIN".

Hi all you great peoples,

I have just installed my first turnkey "debian-12-turnkey-nextcloud_18.0-1_amd64.tar.gz" from the Proxmox turnkey templates and am having a few issues regarding 2 security risks.

• The "X-Frame-Options" HTTP header is not set to "SAMEORIGIN". This is a potential security or privacy risk, as it is recommended to adjust this setting accordingly.

• The "Strict-Transport-Security" HTTP header is not set to at least "15552000" seconds. For enhanced security, it is recommended to enable HSTS

The problem that i have noticed is that following the nextcloud docs, everything that they suggest to do is already done in the config.php etc.

Any help would be greatly appreciated.

Thanks in advance

Makaone