diff --git a/conf/nginx.conf b/conf/nginx.conf
index 8b4f555..4cfbe81 100644
--- a/conf/nginx.conf
+++ b/conf/nginx.conf
@@ -36,6 +36,6 @@ location / {
   include conf.d/yunohost_panel.conf.inc;
 }
 
-location ~ ^/media {
-    more_set_headers "Content-Security-Policy : script-src 'sandbox';";
+location ~ ^/(proxy|media) {
+    more_set_headers "default-src 'none'; upgrade-insecure-requests; sandbox;";
 }