diff --git a/roles/nextcloud/files/Caddyfile b/roles/nextcloud/files/Caddyfile
index 71ea1a0..8a86c1c 100644
--- a/roles/nextcloud/files/Caddyfile
+++ b/roles/nextcloud/files/Caddyfile
@@ -5,7 +5,7 @@
 	php_fastcgi app:9000
 	header {
 		# enable HSTS
-		# Strict-Transport-Security max-age=31536000;
+		Strict-Transport-Security max-age=31536000;
 	}
 
 	redir /.well-known/carddav /remote.php/dav 301