Post update problems

Server
1

I use owncloud on a raspberry 4 8gb, with apache2 server installed, after running owncloud updates I get these errors:

Security and Configuration Warnings
Some files failed the integrity check. More information on how to resolve this issue can be found in our documentation. (List of Invalid Files… / Rescan…)

Technical information

The following list covers which files have failed the integrity check. Please read
the previous linked documentation to learn more about the errors and how to fix
them.

Results

  • core
    • INVALID_HASH
      • .htaccess

Raw output

Array
(
[core] => Array
(
[INVALID_HASH] => Array
(
[.htaccess] => Array
(
[expected] => a59e561f70cd7e5af9a9215ffff731bb4ce913d7f8f17cbdcdd9df3280557a395694ac91cad8875271d9f7c9150347f62ba719522edef5ff5480458c25ec1005
[current] => ace9fb7b11ddb911e49daa45bb97a19b59311044221480be570f3485f70610379980f7d16fbb61fc35b5d628dfbd4853ac4ce65d5d8c83b5d5611fda8834de0f
)

            )

    )

)

The HTTP header “Strict-Transport-Security” is not configured with a value of at least “15552000” seconds. To improve security, we recommend enabling HSTS as described in our security recommendations.

In the file: /var/www/owncloud/.htaccess I added this:
Header always set Strict-Transport-Security “max-age=15552000; includeSubDomains”

but I still get the error…
could you help me?

2

I have the following in my /etc/apache2/sites-available/default-ssl.conf file. This looks to be working for me without any .htaccess files (well, no .htaccess files that I can remember or find)

            <IfModule mod_headers.c>
                Header always set Strict-Transport-Security "max-age=15552000; includeSubDomains"
            </IfModule>
3

I modified it as you suggested, but I still get the same error.