diff --git a/.gitignore b/.gitignore
index 5784da6..d83f06c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,9 +1,13 @@
 # Hugo
-public
+public/*
 resources
 assets/jsconfig.json
 .hugo_build.lock
 
+# Headers
+!public
+!public/_headers
+
 # VSCode
 .vscode/*
 !.vscode/settings.json
diff --git a/public/_headers b/public/_headers
new file mode 100644
index 0000000..a1fdb07
--- /dev/null
+++ b/public/_headers
@@ -0,0 +1,6 @@
+https://blog.sunyz.dev/*
+  X-Frame-Options: SAMEORIGIN
+  X-Content-Type-Options: nosniff
+  Referrer-Policy: strict-origin-when-cross-origin
+  Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
+  Permissions-Policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
\ No newline at end of file