Back in the game. Unfortunately, traefik doesn't support settings custom response headers atm, so HSTS has to wait.