add middlewares (source nginx template on source helm values), and default_phone_region

deploy/infra/ingress-web-public.yaml

@@ -25,7 +25,6 @@ spec:
           - name: nextcloud-security-headers
           - name: rate-limit
 
-
     # PUBLIC SHARES (NO SSO)
     - match: Host(`cloud.limbosolutions.com`) &&
             (PathPrefix(`/s/`) ||
@@ -39,6 +38,7 @@ spec:
       middlewares:
         - name: rate-limit
         - name: nextcloud-security-headers
+        - name: nextcloud-deny-paths
 
     # Sync clients + mobile app (no SSO)
     - match: Host(`cloud.limbosolutions.com`) &&
@@ -58,6 +58,8 @@ spec:
       middlewares:
         - name: webdav-strip-auth
         - name: rate-limit
+        - name: nextcloud-deny-paths
+        - name: nextcloud-dav
 
     # 3) EVERYTHING ELSE (SSO REQUIRED)
     - match: Host(`cloud.limbosolutions.com`)
@@ -69,7 +71,9 @@ spec:
         # - name: authentik-forward-auth
          - name: nextcloud-security-headers
          - name: rate-limit
-
+         - name: nextcloud-deny-paths
+         - name: nextcloud-wellknown
+         - name: nextcloud-hostmeta