diff --git a/Caddyfile b/Caddyfile
new file mode 100644
index 0000000..f85c628
--- /dev/null
+++ b/Caddyfile
@@ -0,0 +1,17 @@
+lan.vbytes.se {
+    reverse_proxy localhost:5000
+
+    log {
+        output file /var/log/caddy/access.log
+    }
+
+    encode gzip zstd
+
+    header {
+        Permissions-Policy interest-cohort=()
+        Strict-Transport-Security max-age=31536000;
+        X-Content-Type-Options nosniff
+        X-Frame-Options DENY
+        Referrer-Policy no-referrer-when-downgrade
+    }
+}