diff --git a/.drone/helm/prod-val.yaml b/.drone/helm/prod-val.yaml
index 52a26a5..bdb0d48 100644
--- a/.drone/helm/prod-val.yaml
+++ b/.drone/helm/prod-val.yaml
@@ -6,6 +6,9 @@ ingress:
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-prod
     external-dns.alpha.kubernetes.io/hostname: "newsite.dutchellie.nl"
+    nginx.ingress.kubernetes.io/configuration-snippet: |   
+      add_header Content-Security-Policy "frame-ancestors 'self' https://forestofunix.xyz";
+      proxy_hide_header X-Frame-Options ;
   tls:
     - hosts:
         - newsite.dutchellie.nl
diff --git a/.drone/helm/staging-val.yaml b/.drone/helm/staging-val.yaml
index b88ea90..934328e 100644
--- a/.drone/helm/staging-val.yaml
+++ b/.drone/helm/staging-val.yaml
@@ -7,7 +7,8 @@ ingress:
     cert-manager.io/cluster-issuer: letsencrypt-staging
     external-dns.alpha.kubernetes.io/hostname: "newsite.staging.dutchellie.nl"
     nginx.ingress.kubernetes.io/configuration-snippet: |   
-      add_header Content-Security-Policy "default-src 'self'; frame-ancestors 'forestofunix.xyz'";
+      add_header Content-Security-Policy "frame-ancestors 'self' https://forestofunix.xyz";
+      proxy_hide_header X-Frame-Options ;
   tls:
     - hosts:
         - newsite.staging.dutchellie.nl