diff --git a/.drone/helm/staging-val.yaml b/.drone/helm/staging-val.yaml
index 34b1c87..39f64ca 100644
--- a/.drone/helm/staging-val.yaml
+++ b/.drone/helm/staging-val.yaml
@@ -6,6 +6,9 @@ ingress:
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-staging
     external-dns.alpha.kubernetes.io/hostname: "newsite.staging.dutchellie.nl"
+    nginx.ingress.kubernetes.io/configuration-snippet: |   
+      add_header X-Frame-Options "sameorigin";
+      add_header Content-Security-Policy "default-src 'self' frame-ancestors 'forestofunix.xyz';
   tls:
     - hosts:
         - newsite.staging.dutchellie.nl