diff --git a/.gitignore b/.gitignore
index 166fbe7..5e6ed74 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,4 @@
+db.env
 /.idea/.gitignore
 /.idea/misc.xml
 /.idea/modules.xml
diff --git a/db.env b/db.env.template
similarity index 63%
rename from db.env
rename to db.env.template
index 827f986..41106ca 100644
--- a/db.env
+++ b/db.env.template
@@ -1,3 +1,3 @@
 POSTGRES_PASSWORD=
 POSTGRES_DB=nextcloud
-POSTGRES_USER=nextcloud
\ No newline at end of file
+POSTGRES_USER=nextcloud
diff --git a/web/nginx.conf b/web/nginx.conf
index 88f3308..f76bb75 100644
--- a/web/nginx.conf
+++ b/web/nginx.conf
@@ -42,7 +42,7 @@ http {
         # will add the domain to a hardcoded list that is shipped
         # in all major browsers and getting removed from this list
         # could take several months.
-        #add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;" always;
+        add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;" always;
 
         # set max upload size
         client_max_body_size 512M;
@@ -108,8 +108,8 @@ http {
             # The rules in this block are an adaptation of the rules
             # in `.htaccess` that concern `/.well-known`.
 
-            location = /.well-known/carddav { return 301 /remote.php/dav/; }
-            location = /.well-known/caldav  { return 301 /remote.php/dav/; }
+            location = /.well-known/carddav { return 301 $scheme://$host/remote.php/dav/; }
+            location = /.well-known/caldav  { return 301 $scheme://$host/remote.php/dav/; }
 
             location /.well-known/acme-challenge    { try_files $uri $uri/ =404; }
             location /.well-known/pki-validation    { try_files $uri $uri/ =404; }
@@ -170,4 +170,4 @@ http {
             try_files $uri $uri/ /index.php$request_uri;
         }
     }
-}
\ No newline at end of file
+}