diff --git a/roles/nginx/templates/vhost.conf.j2 b/roles/nginx/templates/vhost.conf.j2
index 91b583c..8688305 100644
--- a/roles/nginx/templates/vhost.conf.j2
+++ b/roles/nginx/templates/vhost.conf.j2
@@ -71,6 +71,8 @@ server {
         # Enable this if you want HSTS (recommended, but be careful)
         add_header Strict-Transport-Security max-age=15768000 always;
         {% endif %}
+
+        include extra-security.conf;
     }
 
     include extra-security.conf;