diff --git a/Containers/nextcloud/entrypoint.sh b/Containers/nextcloud/entrypoint.sh
index 19b5d78a..d892cead 100644
--- a/Containers/nextcloud/entrypoint.sh
+++ b/Containers/nextcloud/entrypoint.sh
@@ -342,6 +342,8 @@ if [ "$ONLYOFFICE_ENABLED" = 'yes' ]; then
     else
         php /var/www/html/occ app:update onlyoffice
     fi
+    php /var/www/html/occ config:app:set onlyoffice jwt_secret --value="$ONLYOFFICE_SECRET"
+    php /var/www/html/occ config:app:set onlyoffice jwt_header --value="AuthorizationJwt"
     php /var/www/html/occ config:app:set onlyoffice DocumentServerUrl --value="https://$NC_DOMAIN/onlyoffice"
 else
     if [ -d "/var/www/html/custom_apps/onlyoffice" ]; then
diff --git a/php/containers.json b/php/containers.json
index 32c5f72e..0b8387e4 100644
--- a/php/containers.json
+++ b/php/containers.json
@@ -128,6 +128,7 @@
         "OVERWRITEPROTOCOL=https",
         "TURN_SECRET=%TURN_SECRET%",
         "SIGNALING_SECRET=%SIGNALING_SECRET%",
+        "ONLYOFFICE_SECRET=%ONLYOFFICE_SECRET%",
         "AIO_URL=%AIO_URL%",
         "NEXTCLOUD_MOUNT=%NEXTCLOUD_MOUNT%",
         "CLAMAV_ENABLED=%CLAMAV_ENABLED%",
@@ -158,7 +159,8 @@
       ],
       "volumes": [],
       "secrets": [
-        "REDIS_PASSWORD"
+        "REDIS_PASSWORD",
+        "ONLYOFFICE_SECRET"
       ],
       "maxShutdownTime": 10,
       "restartPolicy": "unless-stopped"
@@ -345,7 +347,10 @@
         "80"
       ],
       "environmentVariables": [
-        "TZ=%TIMEZONE%"
+        "TZ=%TIMEZONE%",
+        "JWT_ENABLED=true",
+        "JWT_HEADER=AuthorizationJwt",
+        "JWT_SECRET=%ONLYOFFICE_SECRET%"
       ],
       "volumes": [
         {
@@ -354,7 +359,9 @@
           "writeable": true
         }
       ],
-      "secrets": [],
+      "secrets": [
+        "ONLYOFFICE_SECRET"
+      ],
       "maxShutdownTime": 10,
       "restartPolicy": "unless-stopped"
     }