47 lines
1.3 KiB
YAML
47 lines
1.3 KiB
YAML
directives:
|
|
child-src:
|
|
- '''self'''
|
|
connect-src:
|
|
- '''self'''
|
|
- 'blob:'
|
|
- 'https://${COMPANION_DOMAIN|companion.opencloud.test}/'
|
|
- 'wss://${COMPANION_DOMAIN|companion.opencloud.test}/'
|
|
- 'https://raw.githubusercontent.com/opencloud-eu/awesome-apps/'
|
|
- 'https://${IDP_DOMAIN|keycloak.opencloud.test}/'
|
|
- 'https://update.opencloud.eu/'
|
|
default-src:
|
|
- '''none'''
|
|
font-src:
|
|
- '''self'''
|
|
frame-ancestors:
|
|
- '''self'''
|
|
frame-src:
|
|
- '''self'''
|
|
- 'blob:'
|
|
- 'https://embed.diagrams.net/'
|
|
# In contrary to bash and docker the default is given after the | character
|
|
- 'https://${COLLABORA_DOMAIN|collabora.opencloud.test}/'
|
|
# This is needed for the external-sites web extension when embedding sites
|
|
- 'https://docs.opencloud.eu'
|
|
img-src:
|
|
- '''self'''
|
|
- 'data:'
|
|
- 'blob:'
|
|
- 'https://raw.githubusercontent.com/opencloud-eu/awesome-apps/'
|
|
# In contrary to bash and docker the default is given after the | character
|
|
- 'https://${COLLABORA_DOMAIN|collabora.opencloud.test}/'
|
|
manifest-src:
|
|
- '''self'''
|
|
media-src:
|
|
- '''self'''
|
|
object-src:
|
|
- '''self'''
|
|
- 'blob:'
|
|
script-src:
|
|
- '''self'''
|
|
- '''unsafe-inline'''
|
|
- 'https://${IDP_DOMAIN|keycloak.opencloud.test}/'
|
|
style-src:
|
|
- '''self'''
|
|
- '''unsafe-inline'''
|