diff --git a/util/Setup/NginxConfigBuilder.cs b/util/Setup/NginxConfigBuilder.cs
index 20229af25..d3782eccd 100644
--- a/util/Setup/NginxConfigBuilder.cs
+++ b/util/Setup/NginxConfigBuilder.cs
@@ -141,14 +141,13 @@ server {{
                 }
 
                 sw.WriteLine($@"
-  # Security headers
-  #add_header X-Frame-Options SAMEORIGIN;
-  add_header X-Content-Type-Options nosniff;
-  add_header X-XSS-Protection ""1; mode=block"";
-  add_header Referrer-Policy same-origin;
-
   location / {{
     proxy_pass http://web:5000/;
+    # Security headers
+    #add_header X-Frame-Options SAMEORIGIN;
+    add_header X-Content-Type-Options nosniff;
+    add_header X-XSS-Protection ""1; mode=block"";
+    add_header Referrer-Policy same-origin;
     add_header Content-Security-Policy ""{ContentSecurityPolicy}"";
   }}