Added explanations for security headers

subdomain-proxy.conf

@@ -46,11 +46,11 @@ server {
 
       # Set the security headers
 
-      add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload";
-      add_header X-Frame-Options DENY;
-      add_header X-Content-Type-Options nosniff;
-      add_header X-XSS-Protection "1; mode=block";
-      add_header Referrer-Policy "origin";
+      add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"; #HSTS
+      add_header X-Frame-Options DENY; #Prevents clickjacking
+      add_header X-Content-Type-Options nosniff; #Prevents mime sniffing
+      add_header X-XSS-Protection "1; mode=block"; #Prevents cross-site scripting attacks
+      add_header Referrer-Policy "origin"; #Idk what this actually does";
     }
 
 }