+ # CSP report only policy
+ add_header Content-Security-Policy-Report-Only "default-src 'none'; form-action 'none'; frame-ancestors 'none'; report-uri https://openstreetmap.report-uri.com/r/d/csp/wizard";
+ # Add NEL reporting
+ add_header Report-To "{\"group\":\"default\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://openstreetmap.report-uri.com/a/d/g\"}],\"include_subdomains\":true}";
+ add_header NEL "{\"report_to\":\"default\",\"max_age\":604800,\"include_subdomains\":true}";
+