X-Frame-Options DENY and CSP frame-ancestors 'none', inside location / (it has its own add_header, so server-level headers aren't inherited). Live on proxy host 58 since 2026-10-11. Refs #12 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
X-Frame-Options DENY and CSP frame-ancestors 'none', inside location / (it has its own add_header, so server-level headers aren't inherited). Live on proxy host 58 since 2026-10-11. Refs #12 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>