diff --git a/machines/vueko/configuration.nix b/machines/vueko/configuration.nix
index bcc9574..bda8e5c 100644
--- a/machines/vueko/configuration.nix
+++ b/machines/vueko/configuration.nix
@@ -18,6 +18,7 @@ in
   ];
 
   sbruder = {
+    nginx.hardening.enable = true;
     restic.system.enable = true;
     wireguard.home.enable = true;
     full = false;