features:
  matomo:           true
  css:              true
  desktop:  true
  javascript:       false
  logout:           false
server:
  domains:
    canonical:
      - "logout.{{ PRIMARY_DOMAIN }}"
  csp:
    flags:
      style-src:
        unsafe-inline: true
      script-src-elem:
        unsafe-inline: true
    whitelist:
      connect-src:
        - "{{ WEB_PROTOCOL }}://*.{{ PRIMARY_DOMAIN }}"
        - "{{ WEB_PROTOCOL }}://{{ PRIMARY_DOMAIN }}"
      script-src-elem:
        - https://cdn.jsdelivr.net
      style-src:
        - https://cdn.jsdelivr.net
      frame-ancestors:
        - "{{ WEB_PROTOCOL }}://<< defaults_applications[web-app-keycloak].server.domains.canonical[0] >>"

