diff --git a/security-headers.conf b/security-headers.conf
new file mode 100644
index 0000000..8dd60f6
--- /dev/null
+++ b/security-headers.conf
@@ -0,0 +1,17 @@
+ProxyTimeout 1800
+
+TraceEnable off
+Header append X-FRAME-OPTIONS "SAMEORIGIN"
+FileETag None
+
+<IfModule mod_headers.c>
+    Header set X-XSS-Protection "1; mode=block"
+</IfModule>
+
+<IfModule mod_headers.c>
+    Header edit Set-Cookie ^(.*)$ $1;HttpOnly;Secure
+</IfModule>
+
+Mutex posixsem
+ProtocolsHonorOrder On
+Protocols h2 h2c http/1.1