Nginx/MIAB hardening (security)

Improvements
32

Who said we don’t want the headers? I didn’t say that.