Remove headers already set in GitLab application_controller.rb

files/gitlab-cookbooks/gitlab/templates/default/nginx-gitlab-http.conf.erb

@@ -65,9 +65,6 @@ server {
   ssl_protocols  <%= @ssl_protocols %>;
   ssl_session_cache  <%= @ssl_session_cache %>;
   ssl_session_timeout  <%= @ssl_session_timeout %>;
-  add_header Strict-Transport-Security max-age=63072000;
-  add_header X-Frame-Options SAMEORIGIN;
-  add_header X-Content-Type-Options nosniff;
   <% end %>
 
   ## Increase this if you want to upload large attachments