diff --git a/nextcloud.subdomain.conf.sample b/nextcloud.subdomain.conf.sample
index 6ff353d..df30b4d 100644
--- a/nextcloud.subdomain.conf.sample
+++ b/nextcloud.subdomain.conf.sample
@@ -21,6 +21,9 @@ server {
     include /config/nginx/ssl.conf;
 
     client_max_body_size 0;
+    
+    add_header X-Frame-Options "SAMEORIGIN";
+    add_header Strict-Transport-Security "max-age=15552000" always;
 
     location / {
         include /config/nginx/proxy.conf;