Upgrade to Nextcloud 32
System requirements
PHP 8.1 is now deprecated but still supported.
PHP 8.4 is now supported, but 8.3 is recommended.
Web server configuration
Setup checks do not check for the
X-XSS-Protection
response header anymore. It has been removed from Nextcloud’s.htaccess
and you may want to adjust your webserver config to not serve it anymore. XSS filtering was supported only until Chromium 78 and similarly old browsers, but had been found to cause more issues, including attack vectors, than it solved. Nowadays, aside of not serving the header at all, the only generally recommended value is0
. More context can be found in the OWASP Cheat Sheet Series.
Monitoring: Counting of active users
The monitoring app was adjusted to count the active users in the same way as occ user:report and the support app.
System address book
During the upgrade to Nextcloud 32 the system address book might become disabled if the amount of system users exceeds the default limit of 5000 users. This is to prevent performance issues. You can re-enable the system address book using the command line or administration interface.
For more information about the system address book, see the documentation. System Address Book