diff --git a/roles/nextcloud/templates/nextcloud.conf.j2 b/roles/nextcloud/templates/nextcloud.conf.j2
index 965973ad4..7a24d512f 100644
--- a/roles/nextcloud/templates/nextcloud.conf.j2
+++ b/roles/nextcloud/templates/nextcloud.conf.j2
@@ -6,7 +6,7 @@ Alias {{ nextcloud_url }} {{ nextcloud_prefix }}/nextcloud
     <IfModule mod_authz_core.c>
     # Apache 2.4
     Require host localhost
-    Require ip 127.0.0.1 {{ lan_ip }}/{{ lan_netmask }} {{ nextcloud_required_ip }}
+    Require ip 127.0.0.1 {{ lan_ip }}/{{ lan_netmask }} {{ nextcloud_required_ip }} {{ openvpn_server_virtual_ip }}/255.255.255.0
     </IfModule>
     <IfModule !mod_authz_core.c>
     # Apache 2.2
diff --git a/vars/default_vars.yml b/vars/default_vars.yml
index 8f097e95a..76df8d252 100644
--- a/vars/default_vars.yml
+++ b/vars/default_vars.yml
@@ -188,6 +188,7 @@ sshd_enabled: True
 # OpenVPN
 vpn_presence: xscenet.net
 openvpn_server_port: 1194
+openvpn_server_virtual_ip: 10.8.0.1
 openvpn_cron_enabled: False
 openvpn_install: True
 openvpn_enabled: False