diff --git a/.docker/web/nextcloud.conf b/.docker/web/nextcloud.conf
index 387214f..2a4255a 100644
--- a/.docker/web/nextcloud.conf
+++ b/.docker/web/nextcloud.conf
@@ -37,7 +37,7 @@ server {
     # will add the domain to a hardcoded list that is shipped
     # in all major browsers and getting removed from this list
     # could take several months.
-    #add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload" always;
+    add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload" always;
 
     # set max upload size and increase upload timeout:
     client_max_body_size 20G;