Custom Headers On Config Yaml

I use Hugo 0.67.0 to try custom headers feature. So, I move my website from Netlify to Zeit Now.

Then I move custom headers from _headers file like this ->

/*
  Vary: Accept-Encoding
  X-Frame-Options: sameorigin
  X-Content-Type-Options: nosniff

To config.yaml file like this ->

server:
  headers:
    - for: /*
      values:
        Vary: Accept-Encoding
        X-Frame-Options: sameorigin
        X-Content-Type-Options: nosniff

But why my security headers result can’t be detected like before?