diff --git a/nextcloud/docker-compose.yml b/nextcloud/docker-compose.yml
index c050884..61a806f 100644
--- a/nextcloud/docker-compose.yml
+++ b/nextcloud/docker-compose.yml
@@ -6,6 +6,9 @@ services:
     networks:
       - proxy
     restart: unless-stopped
+    env_file: secrets/oo.secrets
+    environment:
+      - JWT_ENABLED=true
     labels:
       - "traefik.enable=true"
       - "traefik.http.middlewares.ds-redirect-websecure.redirectscheme.scheme=https"
diff --git a/nextcloud/secrets/oo.secrets.example b/nextcloud/secrets/oo.secrets.example
new file mode 100644
index 0000000..211acef
--- /dev/null
+++ b/nextcloud/secrets/oo.secrets.example
@@ -0,0 +1 @@
+JWT_SECRET=