diff --git a/CHANGELOG.md b/CHANGELOG.md
index 01240c44..6da60c0c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -18,6 +18,7 @@ The **patch** part changes is incremented if multiple releases happen the same m
 
 * Use systemd module instead of command
 * Removed all "warn: False" args in command, shell and other modules as it's been deprecated and will give a hard fail in ansible-core 2.14.0.
+* webapp/nextcloud : Change default data directory to be outside web root
 
 ### Fixed
 
diff --git a/webapps/nextcloud/defaults/main.yml b/webapps/nextcloud/defaults/main.yml
index 5c586620..c6e0a316 100644
--- a/webapps/nextcloud/defaults/main.yml
+++ b/webapps/nextcloud/defaults/main.yml
@@ -9,7 +9,7 @@ nextcloud_domains: []
 
 nextcloud_home: "/home/{{ nextcloud_user }}"
 nextcloud_webroot: "{{ nextcloud_home }}/nextcloud"
-nextcloud_data: "{{ nextcloud_webroot }}/data"
+nextcloud_data: "{{ nextcloud_home }}/data"
 
 nextcloud_db_user: "{{ nextcloud_user }}"
 nextcloud_db_name: "{{ nextcloud_instance_name }}"