diff --git a/nextcloud/rootfs/defaults/nginx_addition b/nextcloud/rootfs/defaults/nginx_addition
index 19a58581e..30bee06b8 100644
--- a/nextcloud/rootfs/defaults/nginx_addition
+++ b/nextcloud/rootfs/defaults/nginx_addition
@@ -1,3 +1,5 @@
+add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;"
+
 location = /.well-known/host-meta {
 return 301 $scheme://$http_hostpublic.php?service=host-meta;
 }