is there any magic place except for nginx.conf and the file in sites-available where http headers might be added? apparently the server is sending the hsts policy and the clacks-overhead twice but I don't see why
@tobypinder for some reason it sets headers in config/environments/production.rb