proxy_hide_header Content-Security-Policy;
    add_header Content-Security-Policy "default-src 'self' https://pl.hyperboreal.zone https://hyperboreal.zone; base-uri 'self'; form-action 'self'; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; style-src 'unsafe-inline' 'self'; font-src 'self'; script-src 'self'; connect-src 'self' wss://pl.hyperboreal.zone; upgrade-insecure-requests; worker-src https://pl.hyperboreal.zone;";