diff --git a/.env b/.env
index 0b497b5..fb37c25 100644
--- a/.env
+++ b/.env
@@ -17,6 +17,7 @@ KEYCLOAK_HOST=connect
 PORTAINER_HOST=portainer
 
 # Nextcloud
+NEXTCLOUD_HOST=cloud
 NEXTCLOUD_MYSQL_DATABASE=nextcloud
 NEXTCLOUD_ADMIN_USER=enkun
 NEXTCLOUD_ADMIN_PASSWORD=163222f8eb8e7726b543706dfd17f35da4fd004ddcb3dbee46f6d4e76ab10cfd
\ No newline at end of file
diff --git a/compose.yml b/compose.yml
index 81168e6..efbfa5d 100644
--- a/compose.yml
+++ b/compose.yml
@@ -126,8 +126,13 @@ services:
       - "8081:80"
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.neah-nextcloud.rule=Host(`cloud.${MAIN_DOMAIN}`)"
+      - "traefik.http.routers.neah-nextcloud.rule=Host(`${NEXTCLOUD_HOST}.${MAIN_DOMAIN}`)"
       - "traefik.http.services.neah-nextcloud.loadbalancer.server.port=80"
+      # Middleware pour les en-têtes CSP
+      - "traefik.http.middlewares.nextcloud-headers.headers.customResponseHeaders.Content-Security-Policy=frame-ancestors 'self' http://${MAIN_DOMAIN} http://localhost:3000"
+      - "traefik.http.middlewares.nextcloud-headers.headers.customResponseHeaders.X-Frame-Options=ALLOWALL"
+      # Application du middleware au routeur
+      - "traefik.http.routers.neah-nextcloud.middlewares=nextcloud-headers"
     networks:
       - default
     depends_on: