Issue #663 - Fix SAMEORIGIN warnings
homelabos uses ALLOWFROM, which triggers an X-FrameOptions warning, so overload the header middleware and use ALLOWFROM instead. Fix nextcloud warning for STS header timeout not set correctly. Fix a setup error when running nextcloud scan for X-Frame-Options. Set the trusted domain for the proxy domain.
Closes #663 (closed)