Implemented iframe option

This commit is contained in:
2025-03-19 15:36:36 +01:00
parent e92515184a
commit 718bd41666
3 changed files with 58 additions and 3 deletions

View File

@@ -18,7 +18,7 @@ location {{location | default("/")}}
{% if nginx.iframe | bool %}
# activate embedding via iframe
add_header X-Frame-Options "SAMEORIGIN" always;
add_header Content-Security-Policy "frame-ancestors 'self' *.{{primary_domain}};" always;
add_header Content-Security-Policy "frame-ancestors {{primary_domain}} 'self' *.{{primary_domain}};" always;
{% endif %}
# WebSocket specific header