diff --git a/CHANGES b/CHANGES
index d7a1eaedd..94113240e 100644
--- a/CHANGES
+++ b/CHANGES
@@ -2666,4 +2666,4 @@
 * optional services: redis & turn . joins sendmail, recvmail
 * backups: encrypted backups must have .enc extension
 * mail: add virtual all mail mailbox
-
+* redirections: use 301 (permanent) instead of 302 (temporary) for redirections. this is better for SEO links
diff --git a/src/nginxconfig.ejs b/src/nginxconfig.ejs
index e4cb0566b..123dfe56e 100644
--- a/src/nginxconfig.ejs
+++ b/src/nginxconfig.ejs
@@ -357,9 +357,8 @@ server {
 
 <% } else if ( endpoint === 'redirect' ) { %>
     location / {
-        # redirect everything to the app. this is temporary because there is no way
-        # to clear a permanent redirect on the browser
-        return 302 https://<%= redirectTo %>$request_uri;
+        # redirect everything to the app
+        return 301 https://<%= redirectTo %>$request_uri;
     }
 <% } else if ( endpoint === 'external' ) { %>
     <% if (proxyAuth.enabled) { %>