diff --git a/Caddy-2.x-with-Cloudflare-DNS.md b/Caddy-2.x-with-Cloudflare-DNS.md
index 52ae77f..1c57826 100644
--- a/Caddy-2.x-with-Cloudflare-DNS.md
+++ b/Caddy-2.x-with-Cloudflare-DNS.md
@@ -28,13 +28,19 @@ https://[YOUR-DOMAIN]:443 {
        # Enable HTTP Strict Transport Security (HSTS)
        Strict-Transport-Security "max-age=31536000;"
        # Enable cross-site filter (XSS) and tell browser to block detected attacks
-       X-XSS-Protection "1; mode=block"
+       X-XSS-Protection "0"
        # Disallow the site to be rendered within a frame (clickjacking protection)
        X-Frame-Options "DENY"
        # Prevent search engines from indexing (optional)
+       # Disallow sniffing of X-Content-Type-Options
+       X-Content-Type-Options "nosniff"
        X-Robots-Tag "none"
        # Server name removing
        -Server
+       # Remove X-Powered-By though this shouldn't be an issue, better opsec to remove
+       -X-Powered-By
+       # Remove Last-Modified because etag is the same and is as effective
+       -Last-Modified
    }
   # The negotiation endpoint is also proxied to Rocket
   reverse_proxy /notifications/hub/negotiate vaultwarden:80