# New Security & setup warning in Nexcloud 23

**URL:** <https://syncloud.discourse.group/t/new-security-setup-warning-in-nexcloud-23/140>\
**Category:** Existing Apps\
**Tags:** nextcloud\
**Created:** [27 December 2021 12:32 UTC](https://syncloud.discourse.group/t/new-security-setup-warning-in-nexcloud-23/140 "2021-12-27T12:32:26Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![janseta](https://avatars.discourse-cdn.com/v4/letter/j/d2c977/32.png) [@janseta](https://syncloud.discourse.group/u/janseta)\
**Post date:** [27 December 2021 12:32 UTC](https://syncloud.discourse.group/t/new-security-setup-warning-in-nexcloud-23/140/1 "2021-12-27T12:32:26Z")

</div>

Hi,  
since I updated to Nextcloud 23, I have a new Security & setup warnings, I can find in Settings/Administration/Overview:

## Security & setup warnings

It’s important for the security and performance of your instance that everything is configured correctly. To help you with that we are doing some automatic checks. Please see the linked documentation for more information.

There are some warnings regarding your setup.

- The reverse proxy header configuration is incorrect, or you are accessing Nextcloud from a trusted proxy. If not, this is a security issue and can allow an attacker to spoof their IP address as visible to the Nextcloud. Further information can be found in the [documentation ↗](https://docs.nextcloud.com/server/23/go.php?to=admin-reverse-proxy).

- Your installation has no default phone region set. This is required to validate phone numbers in the profile settings without a country code. To allow numbers without a country code, please add “default\_phone\_region” with the respective [ISO 3166-1 code ↗](https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2#Officially_assigned_code_elements) of the region to your config file.

Please double check the [installation guides ↗](https://docs.nextcloud.com/server/23/go.php?to=admin-install), and check for any errors or warnings in the [log](https://nextcloud.altur42.syncloud.it/settings/admin/logging).

Check the security of your Nextcloud over [our security scan ↗](https://scan.nextcloud.com/).

## Version

**[Nextcloud Hub II](https://nextcloud.com/) (23.0.0)**

I know that the issue with PHONE is not important… but…  
Must I worry about the reverse proxy issue?

Thanks in advanve

---

<div class="post-metadata">

**Author:** ![boris](https://avatars.discourse-cdn.com/v4/letter/b/74df32/32.png) [@boris](https://syncloud.discourse.group/u/boris)\
**Post date:** [27 December 2021 18:24 UTC](https://syncloud.discourse.group/t/new-security-setup-warning-in-nexcloud-23/140/2 "2021-12-27T18:24:09Z")

</div>

right, the fix is being built, v23 has changed the check a little bit.

phone code fix is manual: [Nextcloud · syncloud/platform Wiki · GitHub](https://github.com/syncloud/platform/wiki/Nextcloud#set-phone-region)