From 85685b1da3e3a20c18e9258993a6fff9ae4f38f2 Mon Sep 17 00:00:00 2001
From: DutchEllie <personal@quenten.nl>
Date: Wed, 20 Apr 2022 14:03:46 +0200
Subject: [PATCH] Added CSP

---
 .drone/helm/staging-val.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.drone/helm/staging-val.yaml b/.drone/helm/staging-val.yaml
index 34b1c87..39f64ca 100644
--- a/.drone/helm/staging-val.yaml
+++ b/.drone/helm/staging-val.yaml
@@ -6,6 +6,9 @@ ingress:
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-staging
     external-dns.alpha.kubernetes.io/hostname: "newsite.staging.dutchellie.nl"
+    nginx.ingress.kubernetes.io/configuration-snippet: |   
+      add_header X-Frame-Options "sameorigin";
+      add_header Content-Security-Policy "default-src 'self' frame-ancestors 'forestofunix.xyz';
   tls:
     - hosts:
         - newsite.staging.dutchellie.nl