Курнат Андрей
48 lines
1.4 KiB
YAML
48 lines
1.4 KiB
YAML
directives:
|
|
child-src:
|
|
- '''self'''
|
|
connect-src:
|
|
- '''self'''
|
|
- 'blob:'
|
|
- 'https://${COMPANION_DOMAIN|companion.qsfera.test}${TRAEFIK_PORT_HTTPS}/'
|
|
- 'wss://${COMPANION_DOMAIN|companion.qsfera.test}${TRAEFIK_PORT_HTTPS}/'
|
|
- 'https://raw.githubusercontent.com/qsfera-eu/awesome-apps/'
|
|
- 'https://${IDP_DOMAIN|keycloak.qsfera.test}${TRAEFIK_PORT_HTTPS}/'
|
|
- 'https://update.qsfera.eu/'
|
|
default-src:
|
|
- '''none'''
|
|
font-src:
|
|
- '''self'''
|
|
frame-ancestors:
|
|
- '''self'''
|
|
frame-src:
|
|
- '''self'''
|
|
- 'blob:'
|
|
- 'https://embed.diagrams.net/'
|
|
# In contrary to bash and docker the default is given after the | character
|
|
- 'https://${COLLABORA_DOMAIN|collabora.qsfera.test}${TRAEFIK_PORT_HTTPS}/'
|
|
# This is needed for the external-sites web extension when embedding sites
|
|
- 'https://docs.qsfera.eu'
|
|
img-src:
|
|
- '''self'''
|
|
- 'data:'
|
|
- 'blob:'
|
|
- 'https://raw.githubusercontent.com/qsfera-eu/awesome-apps/'
|
|
- 'https://tile.openstreetmap.org/'
|
|
# In contrary to bash and docker the default is given after the | character
|
|
- 'https://${COLLABORA_DOMAIN|collabora.qsfera.test}${TRAEFIK_PORT_HTTPS}/'
|
|
manifest-src:
|
|
- '''self'''
|
|
media-src:
|
|
- '''self'''
|
|
object-src:
|
|
- '''self'''
|
|
- 'blob:'
|
|
script-src:
|
|
- '''self'''
|
|
- '''unsafe-inline'''
|
|
- 'https://${IDP_DOMAIN|keycloak.qsfera.test}${TRAEFIK_PORT_HTTPS}/'
|
|
style-src:
|
|
- '''self'''
|
|
- '''unsafe-inline'''
|