diff --git a/services/nextcloud.nix b/services/nextcloud.nix
index acf8007..f1e67e4 100644
--- a/services/nextcloud.nix
+++ b/services/nextcloud.nix
@@ -62,6 +62,8 @@ in {
     services.nextcloud = {
       enable = true;
 
+      enableBrokenCiphersForSSE = false;
+
       hostName = "cloud.${domain}";
       https = true;
       package = pkgs.nextcloud25;