diff --git a/conf.d/nextcloud.tryton.geeraert.eu.conf b/conf.d/nextcloud.tryton.geeraert.eu.conf
index b8d6849..5af77ce 100644
--- a/conf.d/nextcloud.tryton.geeraert.eu.conf
+++ b/conf.d/nextcloud.tryton.geeraert.eu.conf
@@ -10,6 +10,15 @@ server {
 	server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;
         location / {
 		proxy_pass http://nextcloud_backend/;
+		location ~* \.(html|css|jpg|gif|ico|js)$ {
+                        proxy_cache          cache;
+                        proxy_cache_key      $host$uri$is_args$args;
+                        proxy_cache_valid    200 301 302 30m;
+                        expires              30m;
+                        proxy_pass  http://nextcloud_backend;
+                 }
+
+
 #        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 #        proxy_set_header X-Forwarded-Port $server_port;
 #        proxy_set_header X-Forwarded-Scheme $scheme;
@@ -53,7 +62,12 @@ server {
                 return 200 "<!DOCTYPE html><h2>health check</h2>\n";
         }	
 
-	listen 443 ssl; # managed by Certbot
+#	listen 443 ssl; # managed by Certbot
+	listen 443 ssl;
+	listen [::]:443 ssl;
+	http2 on;
+	ssl_protocols TLSv1.2;
+
         ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
         ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
 	#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot