Optimized CSP

roles/docker-keycloak/vars/configuration.yml

@@ -6,7 +6,7 @@ import_realm:         True                                # If True realm will b
 credentials:
 features:
   matomo:             true
-  css:                true
+  css:                false
   portfolio_iframe:   true
   ldap:               true
   central_database:   true

roles/docker-peertube/vars/configuration.yml

@@ -1,7 +1,7 @@
 version:              "bookworm"
 features:
   matomo:             true
-  css:                true
+  css:                false
   portfolio_iframe:   false
   central_database:   true
 csp:

roles/docker-pgadmin/vars/configuration.yml

@@ -12,4 +12,13 @@ features:
   css:                    true
   portfolio_iframe:     false
   central_database:       true
-  oauth2:                 true
+  oauth2:                 true
+csp:
+  flags:
+    style-src:
+      unsafe-inline: true
+    script-src:
+      unsafe-inline: true
+  whitelist:
+    font-src:
+      - "data:"

roles/docker-phpmyadmin/vars/configuration.yml

@@ -9,4 +9,10 @@ features:
   portfolio_iframe: false
   central_database:   true
   oauth2:             true
-hostname:             central-mariadb
+hostname:             central-mariadb
+csp:
+  flags:
+    style-src:
+      unsafe-inline: true
+    script-src:
+      unsafe-inline: true