diff --git a/dockerfiles/commul-customization/default-ssl b/dockerfiles/commul-customization/default-ssl
index 25d34260315ee26fa1f618741d49017fc4592e64..8cf746c3967dabc2cc18b21d289258d767731204 100644
--- a/dockerfiles/commul-customization/default-ssl
+++ b/dockerfiles/commul-customization/default-ssl
@@ -49,18 +49,20 @@ server {
   add_header 'Access-Control-Allow-Credentials' 'true';
 
   # redirect different legacy forms to repository/xmlui
-  rewrite ^/xmlui(.*)$ /repository/xmlui$1 redirect;
-  rewrite ^/repository.?$ /repository/xmlui/ redirect;
-  rewrite ^/solr(.*)$ /repository/solr$1 redirect;
-  rewrite ^/handle/(.*)$ /repository/xmlui/handle/$1 redirect;
+  # changed 'redirect' to 'permanent'
+  rewrite ^/xmlui(.*)$ /repository/xmlui$1 permanent;
+  rewrite ^/repository.?$ /repository/xmlui/ permanent;
+  rewrite ^/solr(.*)$ /repository/solr$1 permanent;
+  rewrite ^/handle/(.*)$ /repository/xmlui/handle/$1 permanent;
 
   set $oai_index /repository/oai/request?verb=Identify;
-  rewrite ^/oai$ $oai_index redirect;
+  rewrite ^/oai$ $oai_index permanent;
   location /oai {
     return 301 https://$http_host/repository$request_uri;
   }
-  rewrite ^/repository/oai$ $oai_index redirect;
+  rewrite ^/repository/oai/?$ $oai_index permanent;
 
+  # kept 'redirect' to be sure that this keeps working
   if ($http_accept ~ "(.*xml.cmdi.*)"){
     rewrite ^/(.*)/xmlui/handle/(.*)$ https://$http_host/repository/oai/cite?metadataPrefix=cmdi&handle=$2? redirect;
   }