diff --git a/home-anthill/templates/ingress-webapp.yaml b/home-anthill/templates/ingress-webapp.yaml
index 7642f35..0235a0b 100644
--- a/home-anthill/templates/ingress-webapp.yaml
+++ b/home-anthill/templates/ingress-webapp.yaml
@@ -8,6 +8,11 @@ metadata:
     cert-manager.io/issuer: "cert-issuer-webapp"
     nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
     nginx.ingress.kubernetes.io/redirect-to-https: "true"
+    nginx.ingress.kubernetes.io/configuration-snippet: |
+      add_header X-Frame-Options "sameorigin";
+      add_header X-Content-Type-Options nosniff;
+      add_header Referrer-Policy 'same-origin';
+      add_header Permissions-Policy "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()";
   {{- end }}
   namespace: {{ .Values.namespace }}
 spec: