diff --git a/deployments/files/nextcloud.yaml b/deployments/files/nextcloud.yaml
index 70a4ef0..f854180 100644
--- a/deployments/files/nextcloud.yaml
+++ b/deployments/files/nextcloud.yaml
@@ -116,15 +116,24 @@ metadata:
   annotations:
     replicator.v1.mittwald.de/replicate-from: cert-manager/wildcard-hxme-net
 ---
+apiVersion: traefik.containo.us/v1alpha1
+kind: Middleware
+metadata:
+  name: redirect-to-https
+  namespace: nextcloud
+spec:
+  redirectScheme:
+    scheme: https
+    permanent: true
+---
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: nextcloud
   namespace: nextcloud
   annotations:
-    traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
-    traefik.ingress.kubernetes.io/redirect-entry-point: websecure
     external-dns.alpha.kubernetes.io/hostname: nc.hxme.net
+    traefik.ingress.kubernetes.io/router.middlewares: nextcloud-redirect-to-https@kubernetescrd
 spec:
   tls:
     - hosts: