diff --git a/ansible/roles/intersect-docker/files/nextcloud/docker-compose.yml b/ansible/roles/intersect-docker/files/nextcloud/docker-compose.yml
index 9517e40..c48b2d0 100644
--- a/ansible/roles/intersect-docker/files/nextcloud/docker-compose.yml
+++ b/ansible/roles/intersect-docker/files/nextcloud/docker-compose.yml
@@ -23,6 +23,8 @@ services:
       - "traefik.http.routers.nextcloud.tls.certresolver=le"
       - "traefik.http.services.nextcloud-nextcloud.loadbalancer.server.port=443"
       - "traefik.http.services.nextcloud-nextcloud.loadbalancer.server.scheme=https"
+      - "traefik.http.middlewares.nextcloud-hsts.headers.stsseconds=15552000"
+      - "traefik.http.routers.nextcloud.middlewares=nextcloud-hsts@docker"
 
   db:
     image: postgres:12-alpine