diff --git a/roles/httpd/website/tasks/main.yml b/roles/httpd/website/tasks/main.yml
index 12bc2333e2..13018d6a7f 100644
--- a/roles/httpd/website/tasks/main.yml
+++ b/roles/httpd/website/tasks/main.yml
@@ -46,6 +46,7 @@
   with_items:
   - logs
   - robots
+  - securityheaders
   notify:
   - reload proxyhttpd
   tags:
diff --git a/roles/httpd/website/templates/securityheaders.conf b/roles/httpd/website/templates/securityheaders.conf
new file mode 100644
index 0000000000..6712d74881
--- /dev/null
+++ b/roles/httpd/website/templates/securityheaders.conf
@@ -0,0 +1,4 @@
+Header always set X-Frame-Options "DENY"
+Header always set X-Xss-Protection "1; mode=block"
+Header always set X-Content-Type-Options "nosniff"
+Header always set Referrer-Policy "same-origin"