diff --git a/templates/etc/nginx/sites-available/cryptpad.j2 b/templates/etc/nginx/sites-available/cryptpad.j2
index 950be27..963affa 100644
--- a/templates/etc/nginx/sites-available/cryptpad.j2
+++ b/templates/etc/nginx/sites-available/cryptpad.j2
@@ -160,6 +160,7 @@
     try_files $uri =404;
   }
 
+{% if item.debug is defined and item.debug == 'true' %}
   # This block provides an alternative means of loading content
   # otherwise only served via websocket. This is solely for debugging purposes,
   # and is thus not allowed by default.
@@ -167,6 +168,7 @@
     add_header Cache-Control max-age=0;
     try_files $uri =404;
   }
+{% endif %}
 
   # The nodejs server has some built-in forwarding rules to prevent
   # URLs like /pad from resulting in a 404. This simply adds a trailing slash