missing parts for headers

angie/conf.dist/http-quic-gso.conf

@@ -1,3 +0,0 @@
-quic_gso on;
-
-proxy_quic_gso on;

angie/conf.dist/http-quic-gso.conf.j2

@@ -0,0 +1,5 @@
+quic_gso on;
+
+{%- if env.NGX_HTTP_NO_PROXY == '0' %}
+proxy_quic_gso on;
+{%- endif %}

angie/conf.dist/http3/param.conf.j2

@@ -2,6 +2,8 @@ http3_max_concurrent_streams 128; #default
 http3_stream_buffer_size 64k; #default
 quic_active_connection_id_limit 3;
 
+{%- if env.NGX_HTTP_NO_PROXY == '0' %}
 proxy_http3_max_concurrent_streams 128; #default
 proxy_http3_stream_buffer_size 64k; #default
-proxy_quic_active_connection_id_limit 3;
+proxy_quic_active_connection_id_limit 3;
+{%- endif %}

angie/j2cfg.dist/headers-response-common.yml.j2

@@ -0,0 +1,9 @@
+{% if env.NGX_HTTP_TRANSPARENT_PROXY == '0' %}
+response_headers:
+  Permissions-Policy: "accelerometer=(), autoplay=(), browsing-topics=(), camera=(), clipboard-read=(), clipboard-write=(), geolocation=(), gyroscope=(), hid=(), interest-cohort=(), magnetometer=(), microphone=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), sync-xhr=(), usb=()"
+  Referrer-Policy: "no-referrer-when-downgrade"
+  Strict-Transport-Security: "max-age=15724800; includeSubDomains; preload"
+  X-Content-Type-Options: "nosniff"
+  X-Frame-Options: "SAMEORIGIN"
+  X-XSS-Protection: "1; mode=block"
+{% endif %}

angie/j2cfg.dist/headers-response.yml

@@ -1,7 +0,0 @@
-response_headers:
-  Permissions-Policy: "microphone=(), camera=(), geolocation=(), interest-cohort=()"
-  Referrer-Policy: "no-referrer-when-downgrade"
-  Strict-Transport-Security: "max-age=15724800; includeSubDomains; preload"
-  X-Content-Type-Options: "nosniff"
-  X-Frame-Options: "SAMEORIGIN"
-  X-XSS-Protection: "1; mode=block"

image-entry.d/21-http-modules.envsh

@@ -4,6 +4,7 @@ if [ "${NGX_HTTP}" = 0 ] ; then
 	unset NGX_HTTP_NO_PROXY NGX_HTTP_WITH_MODSECURITY
 else
 	NGX_HTTP_NO_PROXY=$(gobool_to_int "${NGX_HTTP_NO_PROXY:-0}" 0)
+	export NGX_HTTP_NO_PROXY
 	if [ "${NGX_HTTP_NO_PROXY}" = 0 ] ; then
 		NGX_HTTP_CONFLOAD=$(append_list "${NGX_HTTP_CONFLOAD}" proxy)
 	fi