site-deployer/www.jotoho.de/Caddyfile

http://www.jotoho.de

header Content-Security-Policy "default-src 'none'; base-uri 'self' https://jotoho.de https://*.jotoho.de; child-src 'none'; connect-src 'none'; font-src 'none'; frame-ancestors 'none'; img-src 'self' https://jotoho.de https://*.jotoho.de; media-src 'self' https://jotoho.de https://*.jotoho.de; object-src 'none'; style-src 'self'; worker-src 'none'; upgrade-insecure-requests; form-action 'none';"

file_server {
    root /site/
}