diff --git a/nextcloud/nextcloud.yml b/nextcloud/nextcloud.yml
index 0347454..7f451fe 100644
--- a/nextcloud/nextcloud.yml
+++ b/nextcloud/nextcloud.yml
@@ -1,8 +1,6 @@
-version: "2.1"
-
 services:
   nextcloud:
-    image: linuxserver/nextcloud
+    image: linuxserver/nextcloud:28.0.3-ls308
     container_name: nextcloud
     environment:
       - PUID=1001
@@ -16,9 +14,9 @@ services:
       - mariadb
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.nextcloud-websecure.entrypoints=websecure"
-      - "traefik.http.routers.nextcloud-websecure.rule=Host(`nextcloud.meftimes.com`)"
-      - "traefik.http.services.nextcloud-websecure.loadbalancer.server.port=80"
+      - "traefik.http.routers.nextcloud.entrypoints=websecure"
+      - "traefik.http.routers.nextcloud.rule=Host(`nextcloud.meftimes.com`)"
+      - "traefik.http.services.nextcloud.loadbalancer.server.port=80"
     networks:
       - proxy
       - backend
@@ -55,3 +53,8 @@ networks:
 #nextcloud
 #database host:
 #mariadb
+#
+# add `'overwriteprotocal' => 'https',` to `.config/www/nextcloud/config/config.php` inside docker container to allow mobile phone to connect and stay signed in
+# enable "external files storage" under adminitrative settings (scroll down because UI is poorly laid out)
+# if experiencing problems enable apps (such as external file storage) run `occ app:enable files_external` inside docker container
+# use `occ app:list` to see all apps