Qualys SSL Labs: Suddenly `A` instead of `A+`?

Hi @strarsis, I’m curious what changes were required to resolve the missing headers. Did you end up using the more_set_headers module, and if so, how did you install it with Trellis?

I’ve been struggling to add a custom header directive for CORS and your post has me wondering if maybe I’m running into the NGINX inheritance issue that you highlight here.