So Long Relayd, and Thanks for All the Fish

So Long Relayd, and Thanks for All the Fish 2026-08-17 Running relayd alongside httpd on your OpenBSD web servers is no longer necessary for injecting HTTP security headers. Thanks to the incredible work by rsadowski@ we now have the ability to set our security headers directly inside httpd. Pretty awesome, right? Note: I still love relayd and I'm aware that it offers more than simply applying HTTP security headers. If you still prefer using it, that's okay! Please don't yell at me! Requirements Before & After Full Guide Requirements As of this time of writing (August 2026) you’ll need to be running your system on OpenBSD -current in order to use these new header sets in httpd. If you’re okay with being on the “cutting-edge”, you can update by running the following: doas sysupgrade -s This will trigger a pull of the latest snapshot instead of the next release. Your machine will reboot into the installer automatically, upgrade, and then reboot again. Before & After Previously your web…