more_set_headers "Content-Security-Policy : default-src 'none'; style-src 'self' 'unsafe-inline' data:; img-src 'self' data:; font-src 'self' data:; media-src 'self' data:; frame-ancestors 'none'; form-action 'none';"; location / { try_files $uri $uri/index.html $uri/index.md $uri/index.gmi =404; } include inc/errors.conf;