apache2 nextcloud config

<VirtualHost *:443>
DocumentRoot /var/www/nextcloud
ServerName ***
Protocols h2 http/1.1
<IfModule mod_headers.c>
      Header always set Strict-Transport-Security "max-age=15552000; includeSubDomains; preload"
</IfModule>
ServerAdmin ***
ErrorLog /var/log/apache2/error.log
CustomLog /var/log/apache2/access.log combined
<Directory "/var/www/nextcloud">
AllowOverride All
allow from all
Options FollowSymlinks
Require all granted
    SetEnv MOD_X_SENDFILE_ENABLED 1
    XSendFile On
    XSendFilePath /home/nextcloud
</Directory>
SSLEngine on
SSLProtocol +TLSv1 +TLSv1.1 +TLSv1.2
SSLCertificateFile /etc/letsencrypt/live/***/cert.pem
SSLCACertificateFile /etc/letsencrypt/live/***/chain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/***/privkey.pem

SetOutputFilter BROTLI_COMPRESS
SetEnvIfNoCase Request_URI \.(?:gif|jpe?g|png)$ no-brotli

RedirectMatch 403 /apps/rainloop/app/data/.
</VirtualHost>