diff --git a/src/Makefile b/src/Makefile
index 7b33009..ac96821 100644
--- a/src/Makefile
+++ b/src/Makefile
@@ -1,6 +1,6 @@
 CC=gcc
-CFLAGS=-Wall
-LDFLAGS=-lsodium
+CFLAGS=-g -O2 -ffile-prefix-map=/=. -fstack-protector-strong -Wformat -Werror=format-security
+LDFLAGS=-Wl,-z,relro -lsodium
 LDFLAGS_LIB=-I/usr/include/exim4 -fpic -shared -export-dynamic
 
 .PHONY: clean libs
@@ -8,12 +8,12 @@ LDFLAGS_LIB=-I/usr/include/exim4 -fpic -shared -export-dynamic
 .DEFAULT_GOAL := libs
 
 libexim-encrypt-dlfunc.so: libexim-encrypt-dlfunc.c
-	$(CC) $(CFLAGS) $(LDFLAGS) $(LDFLAGS_LIB) -o $@ $<
+	$(CC) $(CFLAGS) -o $@ $< $(LDFLAGS) $(LDFLAGS_LIB)
 
 genkey: genkey.c
-	$(CC) $(CFLAGS) $(LDFLAGS) -o $@ $<
+	$(CC) $(CFLAGS) -o $@ $< $(LDFLAGS)
 
 clean:
-	rm -f libexim-kitencrypt-dlfunc.so libexim-encrypt-dlfunc.so
+	rm -f libexim-encrypt-dlfunc.so genkey
 
 libs: libexim-encrypt-dlfunc.so