diff --git a/nginx/server.conf b/nginx/server.conf
index 177eaa41..e8614ad4 100644
--- a/nginx/server.conf
+++ b/nginx/server.conf
@@ -14,6 +14,8 @@ server {
 
     root /var/empty;
 
+    include /etc/nginx/snippets/security-headers.conf;
+}
     return 301 https://grapheneos.org$request_uri;
 }