diff --git a/nginx/nginx.conf b/nginx/nginx.conf
index f6f62204..8dbcfb27 100644
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@@ -328,6 +328,7 @@ http {
         }
 
         location = /.well-known/matrix/server {
+            include snippets/security-headers.conf;
             add_header Cache-Control "public, max-age=172800";
             default_type application/json;
         }