Skip some gixy checks

    sed -ir '/add_header_inherit/d' docker/webserver/nginx_templates/default.conf.template

Author: bwbroersma

Makefile

@@ -311,8 +311,8 @@ fix: ## fix trivial linting error automatically
 	${DOCKER_COMPOSE_TOOLS_CMD} run --rm tools bin/lint.sh ${pysrcdirs}
 
 check-gixy: env=test
-check-gixy: ## run nginx config check
-	${DOCKER_COMPOSE_CMD} exec webserver /opt/gixy/bin/gixy /etc/nginx/nginx.conf
+check-gixy: ## run nginx config check, skip the checks HSTS max-age=0 and header redefinitions
+	${DOCKER_COMPOSE_CMD} exec webserver /opt/gixy/bin/gixy --skips hsts_header,add_header_redefinition /etc/nginx/nginx.conf
 
 build-tools tools-build: ## build tools image
 	${DOCKER_COMPOSE_TOOLS_CMD} build tools

docker/webserver/nginx_templates/default.conf.template

@@ -294,7 +294,6 @@ server {
 
     # monitoring, requires authentication, override headers, since CSP is too strict
     location /grafana {
-        add_header_inherit off;
         include http.headers;
         include hsts_h3.headers;
         auth_basic "Please enter your monitoring username and password";
@@ -304,7 +303,6 @@ server {
         proxy_pass $grafana;
     }
     location /prometheus {
-        add_header_inherit off;
         include http.headers;
         include hsts_h3.headers;
         auth_basic "Please enter your monitoring username and password";
@@ -314,7 +312,6 @@ server {
         proxy_pass $prometheus;
     }
     location /alertmanager {
-        add_header_inherit off;
         include http.headers;
         include hsts_h3.headers;
         auth_basic "Please enter your monitoring username and password";
@@ -326,7 +323,6 @@ server {
 
     # routinator proxy for internal use on multi instance setups
     location /routinator/ {
-        add_header_inherit off;
         include http.headers;
         include hsts_h3.headers;