diff --git a/apps/nextcloud/base/nextcloud.yaml b/apps/nextcloud/base/nextcloud.yaml
index 04d7428..fd562d0 100644
--- a/apps/nextcloud/base/nextcloud.yaml
+++ b/apps/nextcloud/base/nextcloud.yaml
@@ -17,6 +17,14 @@ spec:
         app: nextcloud
     spec:
       containers:
+        - name: cron
+          image: nextcloud
+          volumeMounts:
+            - mountPath: /var/www/html
+              name: nextcloud-pvc
+              subPath: html
+          command: [ "/cron.sh" ]
+          resources: {}
         - image: mariadb
           name: mariadb
           args:
diff --git a/infrastructure/03-traefik/base/middlewares/default-headers.yaml b/infrastructure/03-traefik/base/middlewares/default-headers.yaml
index b0884d2..7c547ab 100644
--- a/infrastructure/03-traefik/base/middlewares/default-headers.yaml
+++ b/infrastructure/03-traefik/base/middlewares/default-headers.yaml
@@ -6,6 +6,7 @@ metadata:
 spec:
   headers:
     browserXssFilter: true
+    Permissions-Policy: "geolocation=(self)"
     contentTypeNosniff: true
     forceSTSHeader: true
     stsIncludeSubdomains: true