server { listen 443 ssl; server_name fet.at; include ssl.conf; set $proxy_host triton20; set $proxy_port 8080; location / { include proxy.conf; include secure.conf; proxy_pass http://$proxy_host:$proxy_port; } location /etherpad { include proxy.conf; include secure.conf; more_clear_headers Content-Security-Policy; proxy_cookie_path ~^/(.+)$ "/$1; SameSite=none"; more_set_headers "Content-Security-Policy-Report-Only: default-src 'none'; img-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fet.at/; style-src 'self' 'unsafe-inline' https://fet.at/; font-src 'self' 'unsafe-inline' https://fet.at/; base-uri 'self'; form-action 'self'; connect-src 'self' 'unsafe-inline' https://fet.at/ ; frame-ancestors 'none'"; proxy_pass http://$proxy_host:$proxy_port; } }