add_header Content-Security-Policy "frame-ancestors 'self' chat.franzi.business";