http://www.jotoho.de header Content-Security-Policy "default-src 'none'; base-uri 'self' https://jotoho.de https://*.jotoho.de; child-src 'none'; connect-src 'none'; font-src 'none'; frame-ancestors 'none'; img-src 'self' https://jotoho.de https://*.jotoho.de; media-src 'self' https://jotoho.de https://*.jotoho.de; object-src 'none'; plugin-types 'none'; style-src 'self'; worker-src 'none'; upgrade-insecure-requests; form-action 'none';" file_server { root /site/ }