Added HSTS to the location {} blocks with a proxy_pass since these seem to overwrite the response headers.