[toast0]

You can serve anti-HSTS headers if you really want to serve HTTP, but you'll need to serve HTTPS for the initial page loads.