Added more CSP Configurations for services running on veen.world

roles/docker-espocrm/vars/configuration.yml

@@ -15,4 +15,5 @@ features:
 csp:
   flags:
     script-src:
-      unsafe-inline: true
+      unsafe-inline: true
+      unsafe-eval:   true

roles/docker-gitea/vars/configuration.yml

@@ -8,4 +8,16 @@ features:
   matomo:                         true
   css:                            true
   landingpage_iframe:             true
-  central_database:               true
+  central_database:               true
+csp:
+  flags:
+    script-src:
+      unsafe-inline: true
+    style-src:
+      unsafe-inline: true
+  whitelist:
+    font-src:
+      - "data:"
+      - "blob:"
+    worker-src:
+      - "blob:"

roles/docker-matrix-compose/vars/configuration.yml

@@ -15,4 +15,10 @@ features:
   css:                true
   landingpage_iframe: false
   oidc:               false                              # Deactivated OIDC due to this issue https://github.com/matrix-org/synapse/issues/10492
-  central_database:   true
+  central_database:   true
+csp:
+  flags:
+    script-src:
+      unsafe-inline: true
+    style-src:
+      unsafe-inline: true

roles/docker-moodle/vars/configuration.yml

@@ -8,4 +8,15 @@ features:
   matomo:             true
   css:                true
   landingpage_iframe: false
-  central_database:   true
+  central_database:   true
+csp:
+  flags:
+    script-src:
+      unsafe-inline: true
+      unsafe-eval:   true
+    style-src:
+      unsafe-inline: true
+  whitelist:
+    font-src:
+      - "data:"
+      - "blob:"

roles/docker-nextcloud/vars/configuration.yml

@@ -9,7 +9,7 @@ csp:
       unsafe-inline: true
   whitelist:
     font-src:
-      - data:
+      - "data:"
 oidc:
   enabled:                    "{{ applications.nextcloud.features.oidc | default(true) }}"      # Activate OIDC for Nextcloud
   # floavor decides which OICD plugin should be used. 

roles/docker-pixelfed/vars/configuration.yml

@@ -4,4 +4,11 @@ features:
   matomo:             true
   css:                true
   landingpage_iframe: false
-  central_database:   true
+  central_database:   true
+csp:
+  flags:
+    script-src:
+      unsafe-inline: true
+      unsafe-eval:   true
+    style-src:
+      unsafe-inline: true

roles/docker-taiga/vars/configuration.yml

@@ -12,3 +12,11 @@ features:
   landingpage_iframe: false
   oidc:               false
   central_database:   true
+
+csp:
+  flags:
+    script-src:
+      unsafe-inline: true
+      unsafe-eval:   true
+    style-src:
+      unsafe-inline: true

roles/docker-wordpress/vars/configuration.yml

@@ -24,4 +24,6 @@ csp:
       unsafe-inline: true
   whitelist:
     worker-src:
-      - blob:
+      - "blob:"
+    font-src:
+      - "data:"