diff --git a/deployments/home-server/nextcloud.yaml b/deployments/home-server/nextcloud.yaml
index 77734a9..9e99229 100644
--- a/deployments/home-server/nextcloud.yaml
+++ b/deployments/home-server/nextcloud.yaml
@@ -110,6 +110,8 @@ metadata:
   namespace: home-server
   annotations:
     external-dns.alpha.kubernetes.io/hostname: nc.hxme.net
+    nginx.ingress.kubernetes.io/server-snippet: |
+      add_header Strict-Transport-Security "max-age=15552000; includeSubDomains" always;
 spec:
   tls:
     - hosts: