This is the configuration we use on https://generous.horse and it includes the Cache-Control and Referrer-Policy headers.