Added explanations for security headers

subdomain-proxy.conf

@@ -45,12 +45,12 @@ server {
       proxy_redirect      http://YOURSERVER:YOURPORT https://YOURSUBDOMAIN.YOURSITEDOMAIN.com;
 
       # Set the security headers
-      
-      add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload";
-      add_header X-Frame-Options DENY;
-      add_header X-Content-Type-Options nosniff;
-      add_header X-XSS-Protection "1; mode=block";
-      add_header Referrer-Policy "origin";
+
+      add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"; #HSTS
+      add_header X-Frame-Options DENY; #Prevents clickjacking
+      add_header X-Content-Type-Options nosniff; #Prevents mime sniffing
+      add_header X-XSS-Protection "1; mode=block"; #Prevents cross-site scripting attacks
+      add_header Referrer-Policy "origin"; #Idk what this actually does";
     }
 
 }