diff --git a/apache_secure_data b/apache_secure_data
index 39d737a..8b5fbf7 100644
--- a/apache_secure_data
+++ b/apache_secure_data
@@ -8,9 +8,10 @@ Alias /nextcloud "@DATAPATH@/"
     </IfModule>
 
     <IfModule mod_headers.c>
+      Header set Referrer-Policy no-referrer
       Header always set Strict-Transport-Security "max-age=15768000; includeSubDomains; preload"
     </IfModule>
-    
+
     SetEnv HOME @DATAPATH@
     SetEnv HTTP_HOME @DATAPATH@
 </Directory>
diff --git a/nextcloud.changes b/nextcloud.changes
index c35a1be..76f7b91 100644
--- a/nextcloud.changes
+++ b/nextcloud.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Mon Sep 10 15:04:19 UTC 2018 - ecsos@opensuse.org
+
+- Insert Referrer-Policy in nextcloud.conf
+
 -------------------------------------------------------------------
 Thu Sep  6 18:54:35 UTC 2018 - ecsos@opensuse.org