diff --git a/caddy/Caddyfile b/caddy/Caddyfile
index 1a8af0b..aada8aa 100644
--- a/caddy/Caddyfile
+++ b/caddy/Caddyfile
@@ -160,13 +160,35 @@ api.nepse.sauravdhakal.com.np {
 # NEPSE APP (Staging - VPN Only)
 # -----------------------------------------------
 staging-nepse.sauravdhakal.com.np {
-    bind 100.81.85.182
-    reverse_proxy localhost:4100
+    # bind 100.81.85.182
+    # reverse_proxy localhost:4100
+
+    header {
+        X-Content-Type-Options nosniff
+        X-Frame-Options DENY
+        Referrer-Policy strict-origin-when-cross-origin
+    }
+
+    reverse_proxy localhost:4100 {
+        header_up X-Real-IP {remote_host}
+        header_up X-Forwarded-For {remote_host}
+    }
 }
 
 api.staging-nepse.sauravdhakal.com.np {
-    bind 100.81.85.182
-    reverse_proxy localhost:4101
+    # bind 100.81.85.182
+    # reverse_proxy localhost:4101
+
+    header {
+        X-Content-Type-Options nosniff
+        X-Frame-Options DENY
+        Referrer-Policy strict-origin-when-cross-origin
+    }
+
+    reverse_proxy localhost:4101 {
+        header_up X-Real-IP {remote_host}
+        header_up X-Forwarded-For {remote_host}
+    }
 }