diff --git a/owncloud/nginx.conf b/owncloud/nginx.conf
index f1bbcfb..8f39f1c 100644
--- a/owncloud/nginx.conf
+++ b/owncloud/nginx.conf
@@ -58,11 +58,13 @@ http {
         error_page 403 /core/templates/403.php;
         error_page 404 /core/templates/404.php;
         
-        add_header Strict-Transport-Security "max-age=15552000; includeSubdomains; preload;";
+        add_header Strict-Transport-Security "max-age=15768000; includeSubdomains; preload;";
         add_header X-Frame-Options SAMEORIGIN;
         add_header X-Content-Type-Options nosniff;
         add_header X-XSS-Protection "1; mode=block";
         add_header X-Robots-Tag none;
+        add_header X-Download-Options noopen;
+        add_header X-Permitted-Cross-Domain-Policies none;
 
         location = /robots.txt {
             allow all;