diff --git a/install_files/securedrop-ossec-server/var/ossec/etc/local_internal_options.conf b/install_files/securedrop-ossec-server/var/ossec/etc/local_internal_options.conf
new file mode 100644
index 0000000000..6adcad3b5d
--- /dev/null
+++ b/install_files/securedrop-ossec-server/var/ossec/etc/local_internal_options.conf
@@ -0,0 +1,10 @@
+# local_internal_options.conf
+#
+# This file should be handled with care. It contains
+# run time modifications that can affect the use
+# of OSSEC. Only change it if you know what you
+# are doing. Look first at ossec.conf
+# for most of the things you want to change.
+#
+# This file will not be overwritten during upgrades.
+maild.full_subject=1