diff --git a/nginx/nginx.conf b/nginx/nginx.conf
index 617d7e2e..4745b3b6 100644
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@@ -192,6 +192,7 @@ http {
         add_header Cross-Origin-Resource-Policy "same-origin" always;
 
         location = / {
+            include snippets/security-headers.conf;
             add_header Cache-Control "public, max-age=2592000";
             return 301 https://grapheneos.org/features#vanadium;
         }