{%- if certificate and certificate_id > 0 %}
{%- if ssl_forced %}
{%- if hsts_enabled %}
  more_clear_headers "Expect-CT";
  include conf.d/include/hsts.conf;
{%- endif %}
{%- endif %}
{%- endif %}

{%- unless certificate and certificate_id > 0 %}
{%- unless ssl_forced %}
{%- unless hsts_enabled %}
  more_clear_headers "Expect-CT";
  more_clear_headers "Strict-Transport-Security";
{%- endunless %}
{%- endunless %}
{%- endunless %}