diff --git a/conf/nginx.conf b/conf/nginx.conf
index e05466f..ca12fc8 100644
--- a/conf/nginx.conf
+++ b/conf/nginx.conf
@@ -5,8 +5,6 @@ set $api_domain "__DOMAIN__";
 set $files_domain "__DOMAIN__";
 ssl_ecdh_curve secp384r1;
 
-more_set_headers "X-XSS-Protection: 1; mode=block";
-more_set_headers "X-Content-Type-Options: nosniff";
 more_set_headers "Access-Control-Allow-Origin: ${allowed_origins}";
 more_set_headers "Access-Control-Allow-Credentials: true";
 # more_set_headers "X-Frame-Options: SAMEORIGIN";