Allow enterprise frontend iframe embedding

docker/nginx.conf.template

@@ -11,7 +11,12 @@ server {
   proxy_ssl_server_name on;
   send_timeout 300s;
 
+  proxy_hide_header X-Frame-Options;
+  proxy_hide_header Content-Security-Policy;
+  add_header Content-Security-Policy "frame-ancestors *" always;
+
   location = /index.html {
+    add_header Content-Security-Policy "frame-ancestors *" always;
     add_header Cache-Control "no-cache, no-store, must-revalidate" always;
     add_header Pragma "no-cache" always;
     add_header Expires "0" always;
@@ -19,6 +24,7 @@ server {
   }
 
   location ~* \.(?:js|mjs|css|png|jpg|jpeg|gif|svg|ico|webp|avif|woff2?|ttf|otf|map)$ {
+    add_header Content-Security-Policy "frame-ancestors *" always;
     add_header Cache-Control "public, max-age=31536000, immutable" always;
     try_files $uri =404;
   }