Diepti https tailscale

# /etc/apache2/sites-available/000-default.conf
<VirtualHost *:80>
    ServerName dietpidevice.name-name.ts.net
    Redirect permanent / https://dietpidevice.name-name.ts.net/
</VirtualHost>

_________________________________________________________________________________________

# /etc/apache2/sites-available/nextcloud-ssl.conf

<VirtualHost *:443>
    ServerName dietpidevice.name-name.ts.net
    ServerAlias (Zerotier as a bonus)100.100.999.66

    DocumentRoot /var/www
    SSLEngine on

    SSLCertificateFile /etc/apache2/tailscale-certs/dietpiserver.crt
    SSLCertificateKeyFile /etc/apache2/tailscale-certs/dietpiserver.key

    <Directory /var/www/nextcloud>
        Require all granted
        AllowOverride All
        DirectoryIndex index.php index.html
        Options FollowSymLinks

        <IfModule mod_dav.c>
            Dav off
        </IfModule>

        <IfModule mod_headers.c>
            Header always set X-XSS-Protection "1; mode=block"
        </IfModule>
    </Directory>

    <FilesMatch \.php$>
        SetHandler "proxy:unix:/run/php/php8.2-fpm.sock|fcgi://localhost/"
    </FilesMatch>

    Redirect 301 /.well-known/webfinger /nextcloud/index.php/.well-known/webfinger
    Redirect 301 /.well-known/nodeinfo  /nextcloud/index.php/.well-known/nodeinfo

    ErrorLog ${APACHE_LOG_DIR}/nextcloud_ssl_error.log
    CustomLog ${APACHE_LOG_DIR}/nextcloud_ssl_access.log combined
</VirtualHost>