diff --git a/applications/stuff/nextcloud.yaml b/applications/stuff/nextcloud.yaml
index 4abd2a4..a97be05 100644
--- a/applications/stuff/nextcloud.yaml
+++ b/applications/stuff/nextcloud.yaml
@@ -94,6 +94,9 @@ metadata:
     external-dns.alpha.kubernetes.io/hostname: nc.hxme.net
     nginx.ingress.kubernetes.io/server-snippet: |
       add_header Strict-Transport-Security "max-age=15552000; includeSubDomains" always;
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/custom-http-headers: "Strict-Transport-Security: max-age=15768000; includeSubDomains; preload"
 spec:
   tls:
     - hosts: