From 74b3cc4b9163af99f5bd80f3fd26dbb750365ba2 Mon Sep 17 00:00:00 2001
From: Aleksandr Meshchriakov <avm@sh-inc.ru>
Date: Tue, 23 Jun 2026 17:53:39 +0200
Subject: [PATCH] Allow enterprise frontend iframe embedding

---
 docker/nginx.conf.template | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/docker/nginx.conf.template b/docker/nginx.conf.template
index 869c68a..04d0f10 100644
--- a/docker/nginx.conf.template
+++ b/docker/nginx.conf.template
@@ -11,7 +11,12 @@ server {
   proxy_ssl_server_name on;
   send_timeout 300s;
 
+  proxy_hide_header X-Frame-Options;
+  proxy_hide_header Content-Security-Policy;
+  add_header Content-Security-Policy "frame-ancestors *" always;
+
   location = /index.html {
+    add_header Content-Security-Policy "frame-ancestors *" always;
     add_header Cache-Control "no-cache, no-store, must-revalidate" always;
     add_header Pragma "no-cache" always;
     add_header Expires "0" always;
@@ -19,6 +24,7 @@ server {
   }
 
   location ~* \.(?:js|mjs|css|png|jpg|jpeg|gif|svg|ico|webp|avif|woff2?|ttf|otf|map)$ {
+    add_header Content-Security-Policy "frame-ancestors *" always;
     add_header Cache-Control "public, max-age=31536000, immutable" always;
     try_files $uri =404;
   }