add X-Powered-By response header

server/middleware/csp.go

@@ -22,6 +22,7 @@ func SetPrivacyHeaders(h http.Handler) http.Handler {
 		header.Add("X-Frame-Options", "DENY")
 		// use this if need iframe: `X-Frame-Options: SAMEORIGIN`
 		header.Add("X-Content-Type-Options", "nosniff")
+		header.Add("X-Powered-By", "hatsune miku")
 		/*
 			NOTE: The HSTS header is commented out to avoid potential conflicts with reverse proxies,
 						which may already set their own HSTS policies. Generally, it is better for reverse proxies