cmc/dotfiles

Using GNU Stow to manage my dotfiles.

clone: git clone https://gitbay.org/cmc/dotfiles.git

253d3cf2990b0be4f4ae7b0b6f5b5edf51960db9

verified · cmc

author: Christian Cleberg <hello@cleberg.net> · 2026-04-08T15:29:34Z

fix CSP for img.cleberg.net

 linux/nginx/etc/nginx/nginx.conf | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/linux/nginx/etc/nginx/nginx.conf b/linux/nginx/etc/nginx/nginx.conf
index 13301ad..47a5032 100644
--- a/linux/nginx/etc/nginx/nginx.conf
+++ b/linux/nginx/etc/nginx/nginx.conf
@@ -143,7 +143,15 @@ http {
   # Add Content-Security-Policy for HTML documents.
   # custom.d/security/content-security-policy.conf
   map $sent_http_content_type $content_security_policy {
-    ~*text/(html|javascript)|application/pdf|xml "default-src 'self'; base-uri 'none'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; upgrade-insecure-requests";
+    ~*text/(html|javascript)|application/pdf|xml "
+      default-src 'self';
+      img-src 'self' https://img.cleberg.net;
+      base-uri 'none';
+      form-action 'self';
+      frame-ancestors 'none';
+      object-src 'none';
+      upgrade-insecure-requests
+    ";
   }
 
   # Add Permissions-Policy for HTML documents.