diff --git a/caddy/Caddyfile b/caddy/Caddyfile
index 81373a6..1dbf1db 100644
--- a/caddy/Caddyfile
+++ b/caddy/Caddyfile
@@ -75,8 +75,13 @@ uptime.sauravdhakal.com.np {
 
 # Gitea — VPN only, it's your private git server
 gitea.sauravdhakal.com.np {
-    bind 100.81.85.182
     reverse_proxy localhost:3000
+
+    header {
+      X-Content-Type-Options nosniff
+      X-Frame-Options DENY
+      Referrer-Policy strict-origin-when-cross-origin
+    }
 }
 
 # Woodpecker CI — VPN only