Let's not play security expert.  Use Mozillas recommended server
config, even if it's ridiculously verbose.  Reasoning - they make
the browser, so if they've got it wrong, you're buggered anyway.
Merge branch 'master' of https://github.com/friendica/red