Configurable Security Headers and Cyphers

Im looking for a way to increase the Strict-Transport-Security time from the default of 126 days to something higher. There are other security headers I would like to add as well.

TypeScript

• Content-Security-Policy
• X-Frame-Options
• X-XSS-Protection (or use Content-Security-Policy)
• Referrer-Policy
• Permissions-Policy
• X-Permitted-Cross-Domain-Policies
• Cache-Control
• Pragma (?)

I'm also curious if we can remove weak cyphers such as

TypeScript

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013)   ECDH secp521r1 (eq. 15360 bits RSA)   FS   WEAK    128
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014)   ECDH secp521r1 (eq. 15360 bits RSA)   FS   WEAK    256
TLS_RSA_WITH_AES_128_GCM_SHA256 (0x9c)   WEAK    128
TLS_RSA_WITH_AES_256_GCM_SHA384 (0x9d)   WEAK    256
TLS_RSA_WITH_AES_128_CBC_SHA (0x2f)   WEAK    128
TLS_RSA_WITH_AES_256_CBC_SHA (0x35)   WEAK