###########################
### ciphers.meer-web.nl ###
###########################
ssl.openssl.ssl-conf-cmd = (
  "MinProtocol" => "TLSv1.2",
  "Options" => "-ServerPreference",
  "CipherString" => "EECDH+AESGCM:EDH+AESGCM:CHACHA20:!SHA1:!SHA256:!SHA384"
)

var.response_header_policy = (
  "strict-transport-security" => "max-age=63072000; includeSubDomains; preload"
  "content-security-policy" => "default-src https:",
  "x-frame-options" => "DENY",
  "x-content-type-options" => "nosniff",
  "x-xss-protection" => "1; mode=block",
  "permissions-policy" => "interest-cohort=()"
)

setenv.set-response-header += var.response_header_policy