in nextcloud, now you can / should add strict transport security max-age.
On apache:
```
<VirtualHost *:443>
ServerName cloud.nextcloud.com
<IfModule mod_headers.c>
Header always set Strict-Transport-Security "max-age=15552000; includeSubDomains"
</IfModule>
</VirtualHost>
```
in nextcloud, now you can / should add strict transport security max-age.
On apache: