diff --git a/config/nginx.sample.conf b/config/nginx.sample.conf
index 5c26da3428d..940593719de 100644
--- a/config/nginx.sample.conf
+++ b/config/nginx.sample.conf
@@ -83,6 +83,7 @@ server {
   location / {
     root $public;
     add_header ETag "";
+    add_header Referrer-Policy 'no-referrer-when-downgrade';
 
     # auth_basic on;
     # auth_basic_user_file /etc/nginx/htpasswd;