From a838ed6fa344590ee97e0f15277312958bac6c4c Mon Sep 17 00:00:00 2001
From: Julien Palard <julien@palard.fr>
Date: Tue, 14 Feb 2023 16:20:38 +0100
Subject: [PATCH] dl.afpy.org: Content Security Poilicy.

---
 dl.yml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/dl.yml b/dl.yml
index 7db2ef1..adef001 100644
--- a/dl.yml
+++ b/dl.yml
@@ -48,7 +48,11 @@
         state: present
 
     - name: Setup afpy.org
-      include_role: name=nginx
+      tags: nginx
+      include_role:
+        name: nginx
+        apply:
+          tags: nginx
       vars:
         nginx_owner: dl-afpy-org
         nginx_domain: dl.afpy.org
@@ -85,6 +89,8 @@
 
               root /var/www/dl.afpy.org/;
 
+              add_header Content-Security-Policy "default-src 'none'; style-src 'unsafe-inline'";
+
               location /
               {
                   fancyindex on;