diff --git a/docker/resume/nginx.conf b/docker/resume/nginx.conf
index 8e0f4af..3c9247c 100644
--- a/docker/resume/nginx.conf
+++ b/docker/resume/nginx.conf
@@ -11,6 +11,10 @@ server {
 
     add_header Content-Security-Policy "default-src 'none'; script-src 'self' 'unsafe-inline' https://matomo.nixc.us; style-src 'self' 'unsafe-inline' https://colinknapp.com; img-src 'self' https://matomo.nixc.us https://colinknapp.com https://hedgedoc.nixc.us; font-src 'self' data:; frame-ancestors 'self'; base-uri 'self'; form-action 'self';" always;
 
+    add_header Cross-Origin-Embedder-Policy "require-corp" always;
+    add_header Cross-Origin-Resource-Policy "same-origin" always;
+    add_header Cross-Origin-Opener-Policy "same-origin" always;
+
     sub_filter "https://demo.hedgedoc.org" "https://hedgedoc.nixc.us";
     sub_filter_once off;
     sub_filter_types text/html application/javascript;