nano /etc/apache2/sites-available/default-ssl.conf
<VirtualHost *:443> ... Header set Referrer-Policy "same-origin" ... </VirtualHoste>