HTTP/2 200 server: nginx date: Sun, 28 Dec 2025 19:47:05 GMT content-type: text/html; charset=utf-8 vary: Accept-Encoding access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: Link,X-RateLimit-Reset,X-RateLimit-Limit,X-RateLimit-Remaining,X-Request-Id,Idempotency-Key cache-control: max-age=0, private, must-revalidate content-security-policy: upgrade-insecure-requests;script-src 'self';connect-src 'self' blob: https://pleroma.debian.social wss://pleroma.debian.social https:;media-src 'self' https:;img-src 'self' data: blob: https:;default-src 'none';base-uri 'self';frame-ancestors 'none';style-src 'self' 'unsafe-inline';font-src 'self';manifest-src 'self'; permissions-policy: interest-cohort=() referrer-policy: same-origin x-content-type-options: nosniff x-download-options: noopen x-frame-options: DENY x-permitted-cross-domain-policies: none x-request-id: GIV4xwa3nqwj2gwERCSC x-xss-protection: 1; mode=block content-encoding: gzip