From ccf4e557e093a1737bff6593ce9279ca4d2789c2 Mon Sep 17 00:00:00 2001 From: kisfenyo Date: Fri, 13 Feb 2026 11:45:20 +0100 Subject: [PATCH] updated ingress --- nextcloud-system/nextcloud.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nextcloud-system/nextcloud.yaml b/nextcloud-system/nextcloud.yaml index 699ea69..789756a 100644 --- a/nextcloud-system/nextcloud.yaml +++ b/nextcloud-system/nextcloud.yaml @@ -765,7 +765,7 @@ metadata: nginx.ingress.kubernetes.io/ssl-redirect: "true" nginx.ingress.kubernetes.io/configuration-snippet: | proxy_hide_header Content-Security-Policy; - add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https:; media-src 'self'; frame-ancestors 'self' https://home.dooplex.hu https://orsi.dooplex.hu https://kisfenyo.dooplex.hu;" always; + add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://office.dooplex.hu; style-src 'self' 'unsafe-inline' https://office.dooplex.hu; img-src 'self' data: blob: https://office.dooplex.hu; font-src 'self' data: https://office.dooplex.hu; connect-src 'self' blob: wss://office.dooplex.hu https://office.dooplex.hu; frame-src 'self' blob: https://office.dooplex.hu;"; set $geo_allowed 0; if ($remote_addr ~ "^192\.168\.") { set $geo_allowed 1; } if ($remote_addr ~ "^10\.") { set $geo_allowed 1; }