diff --git a/services/nginx.nix b/services/nginx.nix
index cea9fad..78759de 100644
--- a/services/nginx.nix
+++ b/services/nginx.nix
@@ -146,7 +146,7 @@ in
           extraConfig = ''
             default_type application/json;
             add_header Access-Control-Allow-Origin *;
-          '';
+          '' + securityHeaders;
         };
       };
     };