diff --git a/roundcube/templates/default/nginx-site.erb b/roundcube/templates/default/nginx-site.erb
index 8d563dc..a2614b2 100644
--- a/roundcube/templates/default/nginx-site.erb
+++ b/roundcube/templates/default/nginx-site.erb
@@ -1,6 +1,6 @@
 server {
 
-    listen               443 ssl;
+    listen               443 ssl spdy;
     server_name          <%= node[:roundcube][:server_names][0] %>;
     root                 <%= node[:roundcube][:site_dir] %>;
     client_max_body_size <%= node[:roundcube][:max_attachment_size] %>;
@@ -8,6 +8,9 @@ server {
     access_log           <%= node[:roundcube][:log_dir] %>/access.log json;
     error_log            <%= node[:roundcube][:log_dir] %>/error.log;
 
+    # A year of HSTS
+    add_header Strict-Transport-Security "max-age=31536000";
+
     ssl_certificate      <%= node[:postfix][:smtpd_tls_cert_file] %>;
     ssl_certificate_key  <%= node[:postfix][:smtpd_tls_key_file] %>;