diff --git a/docker/resume/nginx.conf b/docker/resume/nginx.conf index e7b842a..251a572 100644 --- a/docker/resume/nginx.conf +++ b/docker/resume/nginx.conf @@ -12,9 +12,18 @@ server { add_header Referrer-Policy "strict-origin-when-cross-origin" always; add_header Permissions-Policy "camera=(), microphone=(), geolocation=(), accelerometer=(), gyroscope=(), magnetometer=(), payment=(), usb=()" always; - # Additional headers (example CSP with nonce for inline content if needed) + # Set up CSP with adjusted sources and nonce set $nonce $request_id; - add_header Content-Security-Policy "default-src 'none'; script-src 'self' 'nonce-$nonce' https://matomo.nixc.us; style-src 'self' 'nonce-$nonce' https://colinknapp.com; img-src 'self' https://matomo.nixc.us https://colinknapp.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self';"; + add_header Content-Security-Policy " + default-src 'none'; + script-src 'self' 'nonce-$nonce' https://matomo.nixc.us; + style-src 'self' 'nonce-$nonce' https://colinknapp.com; + img-src 'self' https://matomo.nixc.us https://colinknapp.com; + connect-src 'self' https://matomo.nixc.us; + frame-ancestors 'self'; + base-uri 'self'; + form-action 'self'; + "; # Basic location block location / {