anchor.diff:                fastcgi_read_timeout 120s;
               '';
             };
  +          "~ \\.(?:css|js|svg|gif|map)$".extraConfig = ''
  +            try_files $uri /index.php$request_uri;
  +            expires 6M;
  +            access_log off;
  +          '';
  +          "~ \\.woff2?$".extraConfig = ''
  +            try_files $uri /index.php$request_uri;
  +            expires 7d;
  +            access_log off;
  +          '';
             "~ ^\\/(?:updater|ocs-provider|ocm-provider)(?:$|\\/)".extraConfig = ''
               try_files $uri/ =404;
               index index.php;
             '';
  -          "~ \\.(?:css|js|woff2?|svg|gif)$".extraConfig = ''
  -            try_files $uri /index.php$request_uri;
  -            add_header Cache-Control "public, max-age=15778463";
  -            add_header X-Content-Type-Options nosniff;
  -            add_header X-XSS-Protection "1; mode=block";
  -            add_header X-Robots-Tag none;
  -            add_header X-Download-Options noopen;
  -            add_header X-Permitted-Cross-Domain-Policies none;
  -            add_header X-Frame-Options sameorigin;
  -            add_header Referrer-Policy no-referrer;
  -            access_log off;
  -          '';
  -          "~ \\.(?:png|html|ttf|ico|jpg|jpeg|bcmap|mp4|webm)$".extraConfig = ''
  -            try_files $uri /index.php$request_uri;
  -            access_log off;
  -          '';
           };
           extraConfig = ''
  +          index index.php index.html /index.php$request_uri;
  +          expires 1m;
             add_header X-Content-Type-Options nosniff;
             add_header X-XSS-Protection "1; mode=block";
             add_header X-Robots-Tag none;
  
positive.code:             '';
            };
            "/" = {
              priority = 200;
              extraConfig = "rewrite ^ /index.php;";
            };
            "~ ^/store-apps" = {
              priority = 201;
              extraConfig = "root ${cfg.home};";
            };
            "= /.well-known/carddav" = {
              priority = 210;
              extraConfig = "return 301 $scheme://$host/remote.php/dav;";
            };
            "= /.well-known/caldav" = {
              priority = 210;
              extraConfig = "return 301 $scheme://$host/remote.php/dav;";
            };
            "~ ^\\/(?:build|tests|config|lib|3rdparty|templates|data)\\/" = {
              priority = 300;
              extraConfig = "deny all;";
            };
            "~ ^\\/(?:\\.|autotest|occ|issue|indie|db_|console)" = {
              priority = 300;
              extraConfig = "deny all;";
            };
            "~ ^\\/(?:index|remote|public|cron|core/ajax\\/update|status|ocs\\/v[12]|updater\\/.+|ocs-provider\\/.+|ocm-provider\\/.+)\\.php(?:$|\\/)" = {
              priority = 500;
              extraConfig = ''
                include ${config.services.nginx.package}/conf/fastcgi.conf;
                fastcgi_split_path_info ^(.+\.php)(\\/.*)$;
                try_files $fastcgi_script_name =404;
                fastcgi_param PATH_INFO $fastcgi_path_info;
                fastcgi_param HTTPS ${if cfg.https then "on" else "off"};
                fastcgi_param modHeadersAvailable true;
                fastcgi_param front_controller_active true;
  
negative.code:           add_header X-Frame-Options sameorigin;
            add_header Referrer-Policy no-referrer;
            add_header Strict-Transport-Security "max-age=15552000; includeSubDomains" always;
            client_max_body_size ${cfg.maxUploadSize};
            fastcgi_buffers 64 4K;
            fastcgi_hide_header X-Powered-By;
  