Nextcloud aims to ship with secure defaults that do not need to get modified by administrators. However, in some cases some additional security hardening can be applied in scenarios were the administrator has complete control over the Nextcloud instance.
from Pocket https://docs.nextcloud.com/server/16/admin_manual/installation/harden_server.html
via IFTTT