controller:
  addHeaders:
    X-Frame-Options: deny
  proxySetHeaders:
    X-Forwarded-Proto: https