diff --git a/dmz/internalproxy/templates/nextcloud.yaml b/dmz/internalproxy/templates/nextcloud.yaml
index 4bd7e96..faf27a9 100644
--- a/dmz/internalproxy/templates/nextcloud.yaml
+++ b/dmz/internalproxy/templates/nextcloud.yaml
@@ -35,6 +35,8 @@ spec:
   routes:
     - match: Host(`nextcloud.durp.info`) && PathPrefix(`/`)
       kind: Rule
+      middlewares:
+        - nextcloud-secure-headers
       services:
         - name: nextcloud
           port: 7282
@@ -66,3 +68,11 @@ metadata:
 spec:
   type: ExternalName
   externalName: durp.info
+
+---
+middlewares:
+  nextcloud-secure-headers:
+    headers:
+      hostsProxyHeaders:
+        - "X-Forwarded-Host"
+      referrerPolicy: "same-origin"
\ No newline at end of file