more_set_headers "Content-Security-Policy: {{ CONTENT_SECURITY_POLICY }}";