diff --git a/reverse-proxy/conf.d/default.conf b/reverse-proxy/conf.d/default.conf
index d1e7dd5e8..0ac024f7f 100644
--- a/reverse-proxy/conf.d/default.conf
+++ b/reverse-proxy/conf.d/default.conf
@@ -34,11 +34,6 @@ server {
   listen 80 default_server;
   server_name filterlists.com;
   include svr-includes/*;
-  
-  location / {
-    include    loc-includes/*;
-  }
-
   return 301 https://filterlists.com$request_uri;
 }
 
@@ -49,11 +44,6 @@ server {
   server_name www.filterlists.com;
   include svr-includes/*;
   ssl_certificate /etc/nginx/cert/filterlists_cert.pem;
-  ssl_certificate_key /etc/nginx/cert/filterlists_key.pem;
-  
-  location / {
-    include    loc-includes/*;
-  }
-  
+  ssl_certificate_key /etc/nginx/cert/filterlists_key.pem;  
   return 301 https://filterlists.com$request_uri;
 }
\ No newline at end of file
diff --git a/reverse-proxy/loc-includes/headers.conf b/reverse-proxy/svr-includes/headers.conf
similarity index 95%
rename from reverse-proxy/loc-includes/headers.conf
rename to reverse-proxy/svr-includes/headers.conf
index d38341d04..4bb10a733 100644
--- a/reverse-proxy/loc-includes/headers.conf
+++ b/reverse-proxy/svr-includes/headers.conf
@@ -3,8 +3,6 @@ add_header X-Frame-Options "SAMEORIGIN" always;
 add_header X-XSS-Protection "1; mode=block" always;
 add_header Referrer-Policy "no-referrer" always;
 add_header Content-Security-Policy "default-src 'none'; connect-src 'self'; img-src 'self' validator.swagger.io data:; manifest-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; base-uri 'self'; form-action 'none'; frame-ancestors 'none';" always;
-add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;
-
 
 # https://enable-cors.org/server_nginx.html
 #
diff --git a/reverse-proxy/svr-includes/security.conf b/reverse-proxy/svr-includes/security.conf
index 99cc9632e..a98128d7f 100644
--- a/reverse-proxy/svr-includes/security.conf
+++ b/reverse-proxy/svr-includes/security.conf
@@ -13,6 +13,8 @@ ssl_protocols TLSv1.2 TLSv1.3;
 ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
 ssl_prefer_server_ciphers off;
 
+add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;
+
 
 # https://support.cloudflare.com/hc/en-us/articles/204899617-Authenticated-Origin-Pulls