include {{ nginx_snippets_directory }}/ssl;
add_header Strict-Transport-Security 'max-age=63115200; includeSubDomains; preload';
add_header 'Referrer-Policy' 'strict-origin' always;