diff --git a/hosts/cube/matrix/default.nix b/hosts/cube/matrix/default.nix
index 848720d..db6ff83 100644
--- a/hosts/cube/matrix/default.nix
+++ b/hosts/cube/matrix/default.nix
@@ -12,8 +12,10 @@
 
   configWellKnownResponse.locations = let
     wellKnownResponse = data: ''
-      default_type application/json;
+      ${config.services.nginx.headers}
       add_header Access-Control-Allow-Origin *;
+
+      default_type application/json;
       return 200 '${strings.toJSON data}';
     '';
   in {
diff --git a/hosts/cube/nextcloud/default.nix b/hosts/cube/nextcloud/default.nix
index 5d41172..6d5d2a6 100644
--- a/hosts/cube/nextcloud/default.nix
+++ b/hosts/cube/nextcloud/default.nix
@@ -1,6 +1,6 @@
  { self, config, lib, pkgs, ... }: let
   inherit (config.networking) domain;
-  inherit (lib) const enabled genAttrs mkAfter;
+  inherit (lib) const enabled genAttrs merge mkAfter;
 
   fqdn = "cloud.${domain}";
 
@@ -107,5 +107,7 @@ in {
     nginx.recommendedHttpHeaders = true;
   };
 
-  services.nginx.virtualHosts.${fqdn} = config.services.nginx.sslTemplate;
+  services.nginx.virtualHosts.${fqdn} = merge config.services.nginx.sslTemplate {
+    extraConfig = config.services.nginx.headers;    
+  };
 }