HTTP/2 200 access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: Link,X-RateLimit-Reset,X-RateLimit-Limit,X-RateLimit-Remaining,X-Request-Id,Idempotency-Key alt-svc: h3=":443"; ma=2592000 cache-control: max-age=0, private, must-revalidate content-encoding: gzip content-security-policy: upgrade-insecure-requests;style-src 'self' 'nonce-iTQanu31Gw2kt_U';font-src 'self';script-src 'self' 'nonce-iTQanu31Gw2kt_U' ;connect-src 'self' https://nixnet.social wss://nixnet.social https://media.nixnet.social https://media.nixnet.social;media-src 'self' https:;img-src 'self' data: blob: https:;default-src 'none';base-uri 'none';frame-ancestors 'none';manifest-src 'self'; content-type: text/html; charset=utf-8 date: Wed, 28 Jan 2026 07:05:40 GMT permissions-policy: interest-cohort=() referrer-policy: same-origin server: Caddy server: Cowboy strict-transport-security: max-age=63072000; includeSubDomains; preload strict-transport-security: max-age=63072000; includeSubDomains; preload vary: Accept-Encoding x-content-type-options: nosniff x-frame-options: DENY x-permitted-cross-domain-policies: none x-request-id: GI7TN7vXQ67olgIBSJFF x-xss-protection: 0