include {{ nginx_snippets_directory }}/ssl;
add_header Strict-Transport-Security 'max-age=15768000; includeSubDomains; preload;'; # default max age: 2592000 = 30 * 24 * 60 * 60s
add_header 'Referrer-Policy' 'same-origin';