dl.afpy.org: Content Security Poilicy.

dl.yml

@@ -48,7 +48,11 @@
         state: present
 
     - name: Setup afpy.org
-      include_role: name=nginx
+      tags: nginx
+      include_role:
+        name: nginx
+        apply:
+          tags: nginx
       vars:
         nginx_owner: dl-afpy-org
         nginx_domain: dl.afpy.org
@@ -85,6 +89,8 @@
 
               root /var/www/dl.afpy.org/;
 
+              add_header Content-Security-Policy "default-src 'none'; style-src 'unsafe-inline'";
+
               location /
               {
                   fancyindex on;