diff --git a/template/frontend/{% if not deploy_as_executable %}default.conf.template{% endif %}.jinja b/template/frontend/{% if not deploy_as_executable %}default.conf.template{% endif %}.jinja
index f2b025c4d..147d6cfad 100644
--- a/template/frontend/{% if not deploy_as_executable %}default.conf.template{% endif %}.jinja	
+++ b/template/frontend/{% if not deploy_as_executable %}default.conf.template{% endif %}.jinja	
@@ -11,7 +11,7 @@
 
     location /_nuxt/ {
         # Cache Nuxt static assets since they already have content hashes in their filenames and won't change until the next deployment
-        add_header Cache-Control "max-age=604800, private, immutable" always;
+        add_header Cache-Control "max-age=604800, private, immutable";
     }
 
     # Serve the static site
@@ -53,9 +53,9 @@
 
     # Named location with shared proxy configuration
     location @proxy {
-        add_header Cache-Control "no-cache, no-store, must-revalidate";
-        add_header Pragma "no-cache";
-        add_header Expires "0";
+        add_header Cache-Control "no-cache, no-store, must-revalidate" always;
+        add_header Pragma "no-cache" always;
+        add_header Expires "0" always;
         proxy_pass http://${BACKEND_HOST}:${BACKEND_PORT};
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
diff --git a/template/{% if has_backend %}backend{% endif %}/src/backend_api/app_def.py.jinja b/template/{% if has_backend %}backend{% endif %}/src/backend_api/app_def.py.jinja
index c553c275d..a2a971276 100644
--- a/template/{% if has_backend %}backend{% endif %}/src/backend_api/app_def.py.jinja	
+++ b/template/{% if has_backend %}backend{% endif %}/src/backend_api/app_def.py.jinja	
@@ -96,7 +96,7 @@ try:
         CORSMiddleware,
         allow_origins=["*"],  # Super permissive CORS setting since this is for intranet
         allow_credentials=True,
-        allow_methods=["GET", "POST", "PUT", "DELETE", "OPTIONS"],
+        allow_methods=["GET", "POST", "PUT", "DELETE", "OPTIONS", "HEAD"],
         allow_headers=["*"],
     ){% endraw %}{% if backend_uses_graphql %}{% raw %}