Optimized Listmonk and Nextcloud CSP for hcaptcha

2025-11-06 13:17:58 +00:00 · 2025-10-30 16:02:09 +01:00
parent f8e5110730
commit 265f815b48
2 changed files with 14 additions and 0 deletions
--- a/roles/web-app-listmonk/config/main.yml
+++ b/roles/web-app-listmonk/config/main.yml
@@ -13,6 +13,16 @@ server:
    aliases: []
  status_codes:
    default: 404
+  csp:
+    flags:
+      script-src-elem:
+        unsafe-inline:  true
+    whitelist:
+      script-src-elem:
+        - "https://www.hcaptcha.com"
+        - "https://js.hcaptcha.com"
+      frame-src:
+        - "https://newassets.hcaptcha.com/"
 docker:
  services:
    database: