diff --git a/admin_manual/installation/nginx.rst b/admin_manual/installation/nginx.rst
index a24a31bf3..32822f362 100644
--- a/admin_manual/installation/nginx.rst
+++ b/admin_manual/installation/nginx.rst
@@ -74,6 +74,7 @@ webroot of your nginx installation. In this example it is
       add_header X-Robots-Tag none;
       add_header X-Download-Options noopen;
       add_header X-Permitted-Cross-Domain-Policies none;
+      add_header Referrer-Policy no-referrer;
 
       # Remove X-Powered-By, which is an information leak
       fastcgi_hide_header X-Powered-By;
@@ -167,6 +168,8 @@ webroot of your nginx installation. In this example it is
           add_header X-Robots-Tag none;
           add_header X-Download-Options noopen;
           add_header X-Permitted-Cross-Domain-Policies none;
+          add_header Referrer-Policy no-referrer;
+
           # Optional: Don't log access to assets
           access_log off;
       }
@@ -219,6 +222,7 @@ your nginx installation.
       add_header X-Robots-Tag none;
       add_header X-Download-Options noopen;
       add_header X-Permitted-Cross-Domain-Policies none;
+      add_header Referrer-Policy no-referrer;
 
       # Remove X-Powered-By, which is an information leak
       fastcgi_hide_header X-Powered-By;
@@ -312,6 +316,8 @@ your nginx installation.
               add_header X-Robots-Tag none;
               add_header X-Download-Options noopen;
               add_header X-Permitted-Cross-Domain-Policies none;
+              add_header Referrer-Policy no-referrer;
+
               # Optional: Don't log access to assets
               access_log off;
           }