[#255] Soften content-security-policy because somehow localzero.js is…

… not recognized as an external script and therefore inline script errors occur
GermanZero-de · Aug 25, 2023 · c095421 · c095421
1 parent d2ef588
commit c095421
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/config/nginx/conf.d/nginx.conf b/config/nginx/conf.d/nginx.conf
@@ -8,7 +8,7 @@ server {
     server_name monitoring.localzero.net monitoring-test.localzero.net;
 
     client_max_body_size 100m;
-    add_header Content-Security-Policy "default-src 'self'";
+    add_header Content-Security-Policy "default-src 'self';script-src 'unsafe-inline' 'self'";
     add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload";
     add_header Cache-Control "no-store";