Update Caddy

Signed-off-by: Bensuperpc <bensuperpc@gmail.com>

caddy/wordpress/Caddyfile

@@ -1,8 +1,13 @@
 bensuperpc.org {
+	# push
+
 	root * /var/www/html
 	php_fastcgi wordpress:9000
+
 	file_server
-    encode gzip
+	encode zstd gzip
+
+	metrics /metrics
 
 	@disallowed {
 		path /xmlrpc.php
@@ -12,6 +17,22 @@ bensuperpc.org {
 	rewrite @disallowed '/index.php'
 
 	respond /uploads/*.php 404
+
+	header {
+		-Server
+		Content-Security-Policy default-src 'self' *.bensuperpc.org
+		X-XSS-Protection 1; mode=block
+		Strict-Transport-Security max-age=31536000; includeSubDomains; preload
+		X-Frame-Options DENY
+		X-Frame-Options: SAMEORIGIN
+		X-Content-Type-Options nosniff
+		Referrer-Policy no-referrer-when-downgrade
+	}
+
+	log {
+		output stdout
+		format console
+	}
 }
 
 www.bensuperpc.com {