diff --git a/pkgs/e11sync-caddyfile.nix b/pkgs/e11sync-caddyfile.nix
index e706a5e..8557a27 100644
--- a/pkgs/e11sync-caddyfile.nix
+++ b/pkgs/e11sync-caddyfile.nix
@@ -16,6 +16,14 @@ writeTextFile {
 
     @staticRoutes path /static/* /contact/* /blog/*
     route @staticRoutes {
+      header {
+        Cross-Origin-Opener-Policy same-origin
+        Referrer-Policy same-origin
+        X-Content-Type-Options nosniff
+        X-Frame-Options DENY
+
+        -Last-Modified
+      }
       file_server * {
         root ${e11sync-static}
         precompressed br gzip