log with timestamps

conf/Caddyfile

@@ -16,7 +16,17 @@
 		Cross-Origin-Opener-Policy "same-origin"
 		Cross-Origin-Resource-Policy "same-origin"
 		Cross-Origin-Embedder-Policy "require-corp"
+		Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:"
+		Expect-CT "max-age=86400, enforce"
 	}
+
+	# Blockera kända skadliga sökvägar för alla domäner
+	@blocked path_regexp ^/(\.env|\.git|wp-login|robots\.txt|api/graphql|actuator/env|\.DS_Store|file6\.php|wp-.*\.php|config\.json|telescope|debug|info\.php|class-.*\.php|spawns\.php|cream1\.php|dal\.php|wp-good\.php|vx\.php|00\.php|cxs\.php|sdm\.php|whs.*\.php|wp-lvminl\.php|hoeig\.php|bajah\.php|ponxnwapemsce\.php|gk\.php|awp-careers\.php|wplogbak\.php)$
+	respond @blocked 403
+
+	# Blockera kända botar
+	@blocked_bots header_regexp User-Agent (scanhawk|leakix|CensysInspect|l9scan|sqlmap|Nikto|DirBuster|OpenAI-SearchBot|oai-searchbot|Mozilla\/5\.0 \(compatible;.*\)
+	respond @blocked_bots 403
 }
 
 test.gynther.se {
@@ -46,6 +56,7 @@ sonarr.gynther.se {
 }
 
 jellyfin.gynther.se {
+	import common
 	reverse_proxy http://jellyfin:8096
 }
 
@@ -72,10 +83,6 @@ gitea.gynther.se {
 import.gynther.se {
 	import common
 
-	# Blockera kända skadliga sökvägar
-    @blocked path_regexp ^/(\.env|\.git|wp-login|robots\.txt|api/graphql|actuator/env|\.DS_Store|file6\.php|wp-.*\.php)$
-    respond @blocked 403
-
 	# Lägg till en standard-sida för /
 	handle / {
 		respond "Welcome to Import Service" 200