🧱 Nginx Security Headers Generator

Check the headers you want and copy the generated add_header lines for your Nginx server block.

Strict-Transport-Security (HSTS, 1 year)

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

Referrer-Policy: strict-origin-when-cross-origin

Permissions-Policy (camera/mic/geolocation off)

Hide Nginx version (server_tokens off)