diff --git a/nginx-rp/nginx.conf b/nginx-rp/nginx.conf
index 7a3a9b6..079a6a9 100644
--- a/nginx-rp/nginx.conf
+++ b/nginx-rp/nginx.conf
@@ -169,6 +169,37 @@ http {
 
 		server_name sx.viyurz.fr;
 
+		location ~ ^/(config|healthz|stats/errors|stats/checker) {
+			proxy_pass http://127.0.0.1:8083;
+ 
+			add_header Strict-Transport-Security "max-age=31536000" always;
+			add_header Set-Cookie "Path=/; HttpOnly; Secure";
+			# Disable some features
+        	add_header Permissions-Policy "accelerometer=(),ambient-light-sensor=(),autoplay=(),camera=(),encrypted-media=(),focus-without-user-activation=(),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),midi=(),payment=(),picture-in-picture=(),speaker=(),sync-xhr=(),usb=(),vr=()";
+			add_header Access-Control-Allow-Methods "GET, OPTIONS";
+			add_header Access-Control-Allow-Origin "*";
+		}
+
+		location /static/ {
+			proxy_pass http://127.0.0.1:8083;
+ 
+			add_header Strict-Transport-Security "max-age=31536000" always;
+			add_header Set-Cookie "Path=/; HttpOnly; Secure";
+			# Disable some features
+        	add_header Permissions-Policy "accelerometer=(),ambient-light-sensor=(),autoplay=(),camera=(),encrypted-media=(),focus-without-user-activation=(),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),midi=(),payment=(),picture-in-picture=(),speaker=(),sync-xhr=(),usb=(),vr=()";
+			add_header Cache-Control "public, max-age=31536000";
+		}
+
+		location /image_proxy {
+			proxy_pass http://127.0.0.1:8083;
+ 
+			add_header Strict-Transport-Security "max-age=31536000" always;
+			add_header Set-Cookie "Path=/; HttpOnly; Secure";
+			# Disable some features
+        	add_header Permissions-Policy "accelerometer=(),ambient-light-sensor=(),autoplay=(),camera=(),encrypted-media=(),focus-without-user-activation=(),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),midi=(),payment=(),picture-in-picture=(),speaker=(),sync-xhr=(),usb=(),vr=()";
+			add_header Content-Security-Policy "default-src 'none'; img-src 'self' data:";
+		}
+
 		location / {
 			proxy_pass http://127.0.0.1:8083;
  
@@ -176,6 +207,9 @@ http {
 			add_header Set-Cookie "Path=/; HttpOnly; Secure";
 			# Disable some features
         	add_header Permissions-Policy "accelerometer=(),ambient-light-sensor=(),autoplay=(),camera=(),encrypted-media=(),focus-without-user-activation=(),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),midi=(),payment=(),picture-in-picture=(),speaker=(),sync-xhr=(),usb=(),vr=()";
+			add_header Cache-Control "no-cache, no-store";
+			add_header Pragma "no-cache";
+			add_header Content-Security-Policy "upgrade-insecure-requests; default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; form-action 'self' https://github.com/searxng/searxng/issues/new; font-src 'self'; frame-ancestors 'self'; base-uri 'self'; connect-src 'self' https://overpass-api.de; img-src 'self' data: https://*.tile.openstreetmap.org; frame-src https://www.youtube-nocookie.com https://player.vimeo.com https://www.dailymotion.com https://www.deezer.com https://www.mixcloud.com https://w.soundcloud.com https://embed.spotify.com";
 		}
 	}