diff --git a/deploy/varnish/default.vcl.template b/deploy/varnish/default.vcl.template
index 5063bd1..b871687 100644
--- a/deploy/varnish/default.vcl.template
+++ b/deploy/varnish/default.vcl.template
@@ -251,10 +251,16 @@ sub vcl_deliver {
   unset resp.http.Via;
   unset resp.http.X-Varnish;
   unset resp.http.Server;
+  unset resp.http.Content-Disposition
 }
 
 sub vcl_synth {
+  set resp.http.Cache-Control = "private, no-store, no-cache";
   set resp.http.X-Cache = "SYNTH";
+  unset resp.http.Via;
+  unset resp.http.X-Varnish;
+  unset resp.http.Server;
+  unset resp.http.Content-Disposition
 }
 
 # ===== PURGE HANDLER =====