There is a function that can register the external site with the additional application of Nextcloud, I want to call Mattermost there. But I can’t call Mattermost because it’s “Rejected by CSP” in Firefox, a blank page in Chrome.
I install Nextcloud and Mattermost on the same server and use separate domains.
Nextcloud: a.mydomain.com
Mattermost: b.mydomain.com
*Server: CentOS 7.6, nginx 1.14.2, MariaDB 10.2.25
I wrote the following in Mattermost side nginx.conf.
add_header X-Frame-Options "ARROW-FROM http://a.mydomain.com";
add_header Content-Security-Policy "frame-ancestors 'self' a.mydomain.com";
In this case, NC can call Mattermost just after restarting nginx. However, it is denied after the second access such as updating. Next, I specified a wildcard in the URL specification, but there was no change.
How can I get Mattermost to be called from NC?
A similar question exists in the past topic, but I made this topic anew as there is no progress.