diff --git a/Doc/Sdi/cloud.xml b/Doc/Sdi/cloud.xml
index 0a3cde6f4adfab40ead680df205160d1fac89c48..d457e1448635e9222aa398bc13ab95cd33b79fb8 100644
--- a/Doc/Sdi/cloud.xml
+++ b/Doc/Sdi/cloud.xml
@@ -247,14 +247,21 @@
     following hints:</para>
 
     <orderedlist>
+      <listitem>
+        <para>The script
+        <uri>https://raw.githubusercontent.com/dicenl/nextcloud/master/vhost.conf</uri>
+        is truncated!</para>
+      </listitem>
+
       <listitem>
         <para>Use <code>https://sdiXY.mi.hdm-stuttgart.de/nextcloud</code>
         rather than <code>https://sdiXY.mi.hdm-stuttgart.de</code> as base URL
         to your server reusing your existing <productname>Apache</productname>
-        server installation. This typically corresponds to a
-        <productname>Nextcloud</productname> directory root
-        <filename>/var/www/html/nextcloud</filename> rather then
-        <filename>/var/www/nextcloud</filename>.</para>
+        server installation. This should be mapped to a
+        <productname>Nextcloud</productname> root directory
+        <filename>/var/www/nextcloud</filename>outside e.g.
+        <filename>/var/www/html/nextcloud</filename> denying attackers getting
+        access to sensitive configuration data.</para>
       </listitem>
 
       <listitem>