fix(frontend): add headers required for WKD, add some CSP headers

ibiixie · ibiixie · commit a51a665d0f02 · 2025-08-06T19:16:31.000+02:00
diff --git a/frontend/caddy/Caddyfile b/frontend/caddy/Caddyfile
@@ -1,5 +1,11 @@
 :80 {
     route {
+        header {
+            Access-Control-Allow-Origin *
+            X-Frame-Options "Deny"
+            Content-Security-Policy "script-src 'self' https://challenges.cloudflare.com;frame-src 'self' https://challenges.cloudflare.com;frame-ancestors 'none';"
+        }
+    
         root * /srv/
         encode gzip
         file_server
