diff --git a/apps/nextcloud.yaml b/apps/nextcloud.yaml
index 1de82dd..1e5ff52 100644
--- a/apps/nextcloud.yaml
+++ b/apps/nextcloud.yaml
@@ -24,7 +24,36 @@ spec:
             secretName: nc-tls
           annotations:
             cert-manager.io/cluster-issuer: letsencrypt
+            nginx.ingress.kubernetes.io/enable-cors: "true"
+            nginx.ingress.kubernetes.io/cors-allow-headers: "X-Forwarded-For"
           className: nginx
+        nextcloud:
+          configs:
+            ssl.config.php: |-
+              <?php
+              $CONFIG = array (
+                'overriteprotocol' => 'https',
+                'trusted_proxies' => array(
+                  0 => '10.0.0.0/8',
+                  1 => '51.15.83.111'
+                ),
+                'forwarded_for_headers' => array(
+                  'HTTP_X_FORWARDED_FOR'
+                )
+              );
+        persistence:
+          enabled: true
+          storageClass: longhorn-single
+          accessMode: ReadWriteOnce
+          size: 2Gi
+        startupProbe:
+          enabled: true
+          initialDelaySeconds: 120
+          failureThreshold: 50
+        livenessProbe:
+          enabled: false
+        readinessProbe:
+          enabled: false
     repoURL: https://nextcloud.github.io/helm/
     targetRevision: 6.6.10
   syncPolicy: