Optimized CSP policies

roles/docker-matrix-compose/vars/configuration.yml

@@ -20,12 +20,13 @@ csp:
   flags:
     script-src:
       unsafe-inline: true
+      unsafe-eval:   true
     style-src:
       unsafe-inline: true
   whitelist:
     connect-src:
-      - "{{ domains.element }}"
+      - "{{ primary_domain }}"
       - "{{ domains.synapse }}"
     script-src:
-      - "{{ domains.element }}"
-      - "{{ domains.synapse }}"  
+      - "{{ domains.synapse }}"
+      - "https://cdn.jsdelivr.net"

roles/docker-wordpress/vars/configuration.yml

@@ -30,4 +30,8 @@ csp:
       - "data:"
     script-src:
       - "https://cdn.gtranslate.net"
-      - "{{ domains.wordpress }}"
+      - "{{ domains.wordpress[0] }}"
+    frame-src:
+      - "{{ domains.peertube }}"
+    style-src:
+      - "https://fonts.bunny.net"