diff --git a/app/Http/Kernel.php b/app/Http/Kernel.php
deleted file mode 100644
index 5d1f25639..000000000
--- a/app/Http/Kernel.php
+++ /dev/null
@@ -1,69 +0,0 @@
-<?php
-
-namespace App\Http;
-
-use Illuminate\Foundation\Http\Kernel as HttpKernel;
-
-class Kernel extends HttpKernel
-{
-    /**
-     * The application's global HTTP middleware stack.
-     *
-     * These middleware are run during every request to your application.
-     *
-     * @var array
-     */
-    protected $middleware = [
-        \Illuminate\Foundation\Http\Middleware\CheckForMaintenanceMode::class,
-        \Illuminate\Foundation\Http\Middleware\ValidatePostSize::class,
-        Middleware\TrimStrings::class,
-        \Illuminate\Foundation\Http\Middleware\ConvertEmptyStringsToNull::class,
-        \Monicahq\Cloudflare\Http\Middleware\TrustProxies::class,
-        Middleware\ForceJsonOnAPI::class,
-    ];
-
-    /**
-     * The application's route middleware groups.
-     *
-     * @var array
-     */
-    protected $middlewareGroups = [
-        'web' => [
-            Middleware\EncryptCookies::class,
-            \Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
-            \Illuminate\Session\Middleware\StartSession::class,
-            \Illuminate\Session\Middleware\AuthenticateSession::class,
-            \Illuminate\View\Middleware\ShareErrorsFromSession::class,
-            Middleware\VerifyCsrfToken::class,
-            \Illuminate\Routing\Middleware\SubstituteBindings::class,
-        ],
-
-        'api' => [
-            'throttle:60,1',
-            'bindings',
-        ],
-    ];
-
-    /**
-     * The application's route middleware.
-     *
-     * These middleware may be assigned to groups or used individually.
-     *
-     * @var array
-     */
-    protected $middlewareAliases = [
-        'auth' => \Illuminate\Auth\Middleware\Authenticate::class,
-        'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class,
-        'bindings' => \Illuminate\Routing\Middleware\SubstituteBindings::class,
-        'cache.headers' => \Illuminate\Http\Middleware\SetCacheHeaders::class,
-        'can' => \Illuminate\Auth\Middleware\Authorize::class,
-        'guest' => Middleware\RedirectIfAuthenticated::class,
-        'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class,
-        'isVerified' => \Jrean\UserVerification\Middleware\IsVerified::class,
-        'role' => \Spatie\Permission\Middleware\RoleMiddleware::class,
-        'permission' => \Spatie\Permission\Middleware\PermissionMiddleware::class,
-        'role_or_permission' => \Spatie\Permission\Middleware\RoleOrPermissionMiddleware::class,
-        'clearance' => Middleware\ClearanceMiddleware::class,
-        '2fa' => Middleware\Google2FAMiddleware::class,
-    ];
-}
diff --git a/bootstrap/app.php b/bootstrap/app.php
index d5d7e70d2..2de7e2d55 100644
--- a/bootstrap/app.php
+++ b/bootstrap/app.php
@@ -14,7 +14,34 @@ return Application::configure(basePath: dirname(__DIR__))
         health: '/up',
     )
     ->withMiddleware(function (Middleware $middleware) {
-        //
+        $middleware->redirectGuestsTo(fn () => route('login'));
+        $middleware->redirectUsersTo('/');
+
+        $middleware->validateCsrfTokens(except: [
+            'failed',
+            'admin/*',
+            'btcpay/webhook',
+        ]);
+
+        $middleware->append([
+            \Illuminate\Foundation\Http\Middleware\CheckForMaintenanceMode::class,
+            \Monicahq\Cloudflare\Http\Middleware\TrustProxies::class,
+            \App\Http\Middleware\ForceJsonOnAPI::class,
+        ]);
+
+        $middleware->web(\Illuminate\Session\Middleware\AuthenticateSession::class);
+
+        $middleware->throttleApi('60,1');
+
+        $middleware->alias([
+            '2fa' => \App\Http\Middleware\Google2FAMiddleware::class,
+            'bindings' => \Illuminate\Routing\Middleware\SubstituteBindings::class,
+            'clearance' => \App\Http\Middleware\ClearanceMiddleware::class,
+            'isVerified' => \Jrean\UserVerification\Middleware\IsVerified::class,
+            'permission' => \Spatie\Permission\Middleware\PermissionMiddleware::class,
+            'role' => \Spatie\Permission\Middleware\RoleMiddleware::class,
+            'role_or_permission' => \Spatie\Permission\Middleware\RoleOrPermissionMiddleware::class,
+        ]);
     })
     ->withExceptions(function (Exceptions $exceptions) {
         //