diff --git a/server/config/authentik/docker-compose.yml b/server/config/authentik/docker-compose.yml
index 5f7b85d..92ff981 100644
--- a/server/config/authentik/docker-compose.yml
+++ b/server/config/authentik/docker-compose.yml
@@ -61,6 +61,7 @@ services:
     labels:
       traefik.http.routers.authentik.rule: Host(`authentik.jafner.net`)
       traefik.http.routers.authentik.tls.certresolver: lets-encrypt
+      traefik.http.routers.authentik.middlewares: security-headers
       traefik.http.services.authentik.loadbalancer.server.port: 9000
 
   worker:
diff --git a/server/config/calibre-web/docker-compose.yml b/server/config/calibre-web/docker-compose.yml
index 72bb075..5cdeac8 100644
--- a/server/config/calibre-web/docker-compose.yml
+++ b/server/config/calibre-web/docker-compose.yml
@@ -13,7 +13,7 @@ services:
     labels:
       - traefik.http.routers.calibre-rpg.rule=Host(`rpg.calibre.jafner.net`)
       - traefik.http.routers.calibre-rpg.tls.certresolver=lets-encrypt
-      - traefik.http.routers.calibre-rpg.middlewares=authentik@file
+      - traefik.http.routers.calibre-rpg.middlewares=authentik@file,security-headers@file
     networks:
       - web