Security Headers Generator
Generate a baseline group of security headers for Apache or Nginx.
Generate HTTP security headers
Security headers give browsers additional rules for transport, framing, content interpretation and sensitive capabilities.
Test configuration carefully; HSTS should only be enabled when the entire domain is ready for HTTPS.