http://www.jotoho.de

header Content-Security-Policy "default-src 'self' https://jotoho.de https://*.jotoho.de; base-uri 'self' https://jotoho.de https://*.jotoho.de; upgrade-insecure-requests;"

file_server {
    root /site/
}