add_header Expect-CT "max-age=86400, enforce" always;
add_header Strict-Transport-Security "max-age=31536000" always;
proxy_hide_header Expect-CT;
proxy_hide_header Strict-Transport-Security;