Set them up in your htaccess: https://torbjornzetterlund.com/hardening-your-http-response-headers-with-htaccess/
