diff --git a/conf.d/search.bbaovanc.com b/conf.d/search.bbaovanc.com
index 85c6df8..89bf609 100644
--- a/conf.d/search.bbaovanc.com
+++ b/conf.d/search.bbaovanc.com
@@ -1,24 +1,29 @@
 # vim: ft=caddyfile
 
 search.bbaovanc.com {
-    encode zstd gzip
     import hsts
 
     @api {
         path /config
-        path /status
+        path /healthz
+        path /stats/errors
+        path /stats/checker
     }
 
     @static {
         path /static/*
     }
 
-    @morty {
-        path /morty/*
+    @notstatic {
+        not path /static/*
     }
 
-    @notmorty {
-        not path /morty/*
+    @imageproxy {
+        path /image_proxy/*
+    }
+
+    @notimageproxy {
+        not path /image_proxy/*
     }
 
     header {
@@ -28,11 +33,8 @@ search.bbaovanc.com {
         # Prevent some browsers from MIME-sniffing a response away from the declared Content-Type
         X-Content-Type-Options "nosniff"
 
-        # Disallow the site to be rendered within a frame (clickjacking protection)
-        X-Frame-Options "SAMEORIGIN"
-
         # Disable some features
-        Permissions-Policy "accelerometer=();ambient-light-sensor=(); autoplay=();camera=();encrypted-media=();focus-without-user-activation=(); geolocation=();gyroscope=();magnetometer=();microphone=();midi=();payment=();picture-in-picture=(); speaker=();sync-xhr=();usb=();vr=()"
+        Permissions-Policy "accelerometer=(),ambient-light-sensor=(),autoplay=(),camera=(),encrypted-media=(),focus-without-user-activation=(),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),midi=(),payment=(),picture-in-picture=(),speaker=(),sync-xhr=(),usb=(),vr=()"
 
         # Disable some features (legacy)
         Feature-Policy "accelerometer 'none';ambient-light-sensor 'none'; autoplay 'none';camera 'none';encrypted-media 'none';focus-without-user-activation 'none'; geolocation 'none';gyroscope 'none';magnetometer 'none';microphone 'none';midi 'none';payment 'none';picture-in-picture 'none'; speaker 'none';sync-xhr 'none';usb 'none';vr 'none'"
@@ -42,6 +44,9 @@ search.bbaovanc.com {
 
         # X-Robots-Tag
         X-Robots-Tag "noindex, noarchive, nofollow"
+
+        # Remove Server header
+        #-Server
     }
 
     header @api {
@@ -49,27 +54,35 @@ search.bbaovanc.com {
         Access-Control-Allow-Origin  "*"
     }
 
+    # Cache
     header @static {
+        # Cache
         #Cache-Control "public, max-age=31536000"
-        Cache-Control no-cache
-	defer
+        Test working
+        defer
     }
 
-    header @notmorty {
-        Content-Security-Policy "upgrade-insecure-requests; default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; form-action 'self'; font-src 'self'; frame-ancestors 'self'; base-uri 'self'; connect-src 'self' https://overpass-api.de; img-src 'self' data: https://*.tile.openstreetmap.org; frame-src https://www.youtube-nocookie.com https://player.vimeo.com https://www.dailymotion.com https://www.deezer.com https://www.mixcloud.com https://w.soundcloud.com https://embed.spotify.com"
+    header @notstatic {
+        # No Cache
+        Cache-Control "no-cache, no-store"
+        Pragma "no-cache"
     }
 
-    handle @morty {
-        header Content-Security-Policy "default-src 'none'; style-src 'self' 'unsafe-inline'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'; img-src 'self' data:; font-src 'self'; frame-src 'self'"
-        reverse_proxy localhost:3000
+    # CSP (see http://content-security-policy.com/ )
+    header @imageproxy {
+        Content-Security-Policy "default-src 'none'; img-src 'self' data:"
     }
 
+    header @notimageproxy {
+        Content-Security-Policy "upgrade-insecure-requests; default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; form-action 'self' https://github.com/searxng/searxng/issues/new; font-src 'self'; frame-ancestors 'self'; base-uri 'self'; connect-src 'self' https://overpass-api.de; img-src 'self' data: https://*.tile.openstreetmap.org; frame-src https://www.youtube-nocookie.com https://player.vimeo.com https://www.dailymotion.com https://www.deezer.com https://www.mixcloud.com https://w.soundcloud.com https://embed.spotify.com"
+    }
+
+    # SearXNG
     handle {
-        reverse_proxy localhost:4040 {
+        encode zstd gzip
+        reverse_proxy localhost:88 {
             header_up X-Forwarded-Port {http.request.port}
-            header_up X-Forwarded-TlsProto {tls_protocol}
-            header_up X-Forwarded-TlsCipher {tls_cipher}
-            header_up X-Forwarded-HttpsProto {proto}
+            header_up X-Forwarded-Proto {http.request.scheme}
         }
     }