fix: Immitch is publi

caddy/Caddyfile

@@ -49,8 +49,19 @@ actual.sauravdhakal.com.np {
 }
 
 immich.sauravdhakal.com.np {
-    bind 100.81.85.182
+    # Allow public access (no bind = all interfaces)
-    reverse_proxy localhost:8082
+    
+    # Security headers
+    header {
+        X-Content-Type-Options nosniff
+        X-Frame-Options DENY
+        Referrer-Policy strict-origin-when-cross-origin
+    }
+
+    reverse_proxy localhost:8082 {
+        header_up X-Real-IP {remote_host}
+        header_up X-Forwarded-For {remote_host}
+    }
 }
 
 filebrowser.sauravdhakal.com.np {