From 981e40175a7b8a8a6c74f29db41429b17680bb77 Mon Sep 17 00:00:00 2001
From: Ivan Dimitrov <ivan@idimitrov.dev>
Date: Mon, 27 Nov 2023 15:06:26 +0200
Subject: [PATCH] remove csp header

---
 mailserver/nginx/default.nix | 1 -
 1 file changed, 1 deletion(-)

diff --git a/mailserver/nginx/default.nix b/mailserver/nginx/default.nix
index 40a517d..a2f86df 100644
--- a/mailserver/nginx/default.nix
+++ b/mailserver/nginx/default.nix
@@ -13,7 +13,6 @@
             https   "max-age=31536000; includeSubdomains; preload";
         }
         add_header Strict-Transport-Security $hsts_header;
-        add_header Content-Security-Policy "script-src 'self'; object-src 'none'; base-uri 'none';" always;
         add_header 'Referrer-Policy' 'origin-when-cross-origin';
         add_header X-Frame-Options DENY;
         add_header X-Content-Type-Options nosniff;