WIP

ansible/vars/common.yml

@@ -21,11 +21,21 @@ common:
       custom_cert: true
       custom_cert_file: "/etc/ssl/certs/test.lab.crt"
       custom_key_file: "/etc/ssl/private/test.lab.key"
-      plugins:
+      crs_plugins:
         - "wordpress-rule-exclusions"
-      exceptions:
+      crs_exceptions:
       # Cf. https://github.com/owasp-modsecurity/ModSecurity/wiki/Reference-Manual-(v3.x)
 #       before_request:
 #         - 'SecRule REQUEST_FILENAME "@endsWith /wp-admin/admin-ajax.php" "id:1,nolog,ctl:ruleRemoveById=932260"'
         after_response:
           - 'SecRuleUpdateTargetById 932260 "!ARGS:tag-name"'
+      header_cross_origin_embedder_policy: "unsafe-none"
+      header_content_security_policy:
+        worker-src: "'self' blob:"
+        img-src: "'self' data: https://secure.gravatar.com/avatar/"
+        font-src: "'self' data:"
+        script-src: "'self' 'unsafe-eval'"
+        script-src-elem: "'self' 'unsafe-inline'"
+        style-src-attr: "'self' 'unsafe-inline'"
+        style-src-elem: "'self' 'unsafe-inline'"
+        frame-src: "'self' blob:"