diff --git a/nextcloud/firstboot.start b/nextcloud/firstboot.start
index 126579a..fcce9e7 100755
--- a/nextcloud/firstboot.start
+++ b/nextcloud/firstboot.start
@@ -11,6 +11,9 @@ localectl --no-convert set-keymap de-latin1-nodeadkeys
 echo 'Activate services...'
 timedatectl set-ntp true
 
+echo 'Setting hardened...'
+paxctl-ng -m /usr/bin/python2.7
+
 
 # variables
 LABEL="DATA"