diff --git a/roles/server/nextcloud/defaults/main.yml b/roles/server/nextcloud/defaults/main.yml
index e754372..9bd79f1 100644
--- a/roles/server/nextcloud/defaults/main.yml
+++ b/roles/server/nextcloud/defaults/main.yml
@@ -32,12 +32,16 @@ database_user: "{{ system_user }}"
 nextcloud_admin_user: "admin"
 nextcloud_admin_pass: "{{ lookup('password', 'credentials/' + inventory_hostname + '/' + domain + '/' + nextcloud_admin_user + ' length=80') }}"
 
+reset_password_link: "disabled" # "" means internal enabled, "disabled" means disabled, <link> means using this link
+
 import_config:
   system:
     # domain
     "overwrite.cli.url": "{{ effective_domain }}"
     trusted_domains:
       - "{{ effective_domain }}"
+    # NextCloud
+    lost_password_link: "{{ reset_password_link }}" # disallow custom password reset
     # database
     dbtype: mysql
     dbhost: localhost