diff --git a/lets-encrypt/activate-tls.sh b/lets-encrypt/activate-tls.sh
index c535a197..2317de51 100644
--- a/lets-encrypt/activate-tls.sh
+++ b/lets-encrypt/activate-tls.sh
@@ -137,7 +137,7 @@ then
     cat << TLS_CREATE > "$tls_conf"
 <VirtualHost *:80>
     RewriteEngine On
-    RewriteRule ^(.*)$ https://%{HTTP_HOST}$1 [R=301,L]
+    RewriteRule ^(.*)$ https://%{HTTP_HOST}$1 [END,NE,R=permanent]
 </VirtualHost>
 
 <VirtualHost *:443>
diff --git a/nextcloud_install_production.sh b/nextcloud_install_production.sh
index 461fbfe7..58297cd5 100644
--- a/nextcloud_install_production.sh
+++ b/nextcloud_install_production.sh
@@ -830,7 +830,7 @@ then
     cat << TLS_CREATE > "$SITES_AVAILABLE/$TLS_CONF"
 # <VirtualHost *:80>
 #     RewriteEngine On
-#     RewriteRule ^(.*)$ https://%{HTTP_HOST}$1 [R=301,L]
+#     RewriteRule ^(.*)$ https://%{HTTP_HOST}$1 [END,NE,R=permanent]
 # </VirtualHost>
 
 <VirtualHost *:443>