Cloudron Forum

This should be fixed with latest package. There was a one-character typo which caused those side-effects https://git.cloudron.io/cloudron/leantime-app/-/commit/afd06057dcf74911d5c9aaf1ff242b3d0e6a4cc6

I was digging deeper and found this article in the docs giving closure! So the correct env vars are: export CONTENT_SECURITY_POLICY_DIRECTIVES__FRAME_SRC="array:'self',http://localhost:3000" export CONTENT_SECURITY_POLICY_DIRECTIVES__CONNECT_SRC="array:'self',http://localhost:3000,ws://localhost:3000" export CONTENT_SECURITY_POLICY_DIRECTIVES__SCRIPT_SRC="array:'self','unsafe-inline'" export CONTENT_SECURITY_POLICY_DIRECTIVES__STYLE_SRC="array:'self','unsafe-inline'" Or specifically adjusted to your use case.

Thank you! Wait and see then ..

@humptydumpty adding another layer will have some performance impact but it should be barely noticeable (plus the security benefits of such a setup are immense). nginx does nothing other than https <-> http on Cloudron.