One rule in our Next config caches a folder we do not have for a year, and the only thing it caches is a redirect to the login form

An audit of the seven header rules in our next.config.mjs against what pub-trivia.app actually sends, including a one-year immutable cache on a path that does not exist and an HSTS preload token that was redundant before we bought the domain.