diff --git a/README.md b/README.md
index 5df60bc..162dadd 100644
--- a/README.md
+++ b/README.md
@@ -33,6 +33,11 @@ Immich Folio acts as a **secure reverse proxy** between your visitors and your p
### Security
+
+View security architecture & protections
+
+
+
| Concern | Protection |
| ----------------------- | ------------------------------------------------------------------------------------------------------- |
| **Server exposure** | Immich URL and port are never sent to the browser — all requests are proxied server-side |
@@ -45,6 +50,8 @@ Immich Folio acts as a **secure reverse proxy** between your visitors and your p
**Production Ready:** The codebase has been fully audited for production. It uses strict Content Security Policy (No `unsafe-eval`), strong cryptographic patterns (SHA-256 for IV generation instead of MD5), lengths-capped inputs for OG dynamic generation to prevent DoS, and is completely free of N+1 database queries since the API isolates Immich.
+
+
### Infrastructure
- **Health check endpoint** — `GET /api/health` for uptime monitoring and container orchestration
@@ -128,6 +135,9 @@ docker compose up -d
The gallery will be available at `http://localhost:7211`.
+
+Advanced Docker (Standalone, Health Check, Proxy)
+
### Standalone Docker
```bash
@@ -164,6 +174,8 @@ photos.example.com {
}
```
+
+
## Tech Stack
- **Next.js 16** (App Router, standalone output)