diff --git a/modules/kubernetes/dbaas/main.tf b/modules/kubernetes/dbaas/main.tf
index 6a9ff1d8..1125a9f0 100644
--- a/modules/kubernetes/dbaas/main.tf
+++ b/modules/kubernetes/dbaas/main.tf
@@ -435,7 +435,10 @@ module "ingress" {
   extra_annotations = {
     "nginx.ingress.kubernetes.io/proxy-body-size" : "500m"
   }
-  rybbit_site_id = "942c76b8bd4d"
+  rybbit_site_id                   = "942c76b8bd4d"
+  additional_configuration_snippet = <<-EOF
+    more_set_headers "Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://rybbit.viktorbarzin.me";
+  EOF
 }
 
 
diff --git a/modules/kubernetes/privatebin/main.tf b/modules/kubernetes/privatebin/main.tf
index 8dea2445..7ec3186f 100644
--- a/modules/kubernetes/privatebin/main.tf
+++ b/modules/kubernetes/privatebin/main.tf
@@ -89,10 +89,13 @@ resource "kubernetes_service" "privatebin" {
 }
 
 module "ingress" {
-  source          = "../ingress_factory"
-  namespace       = "privatebin"
-  name            = "privatebin"
-  host            = "pb"
-  tls_secret_name = var.tls_secret_name
-  rybbit_site_id  = "3ae810b0476d"
+  source                           = "../ingress_factory"
+  namespace                        = "privatebin"
+  name                             = "privatebin"
+  host                             = "pb"
+  tls_secret_name                  = var.tls_secret_name
+  rybbit_site_id                   = "3ae810b0476d"
+  additional_configuration_snippet = <<-EOF
+    more_set_headers "Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://rybbit.viktorbarzin.me";
+  EOF
 }
diff --git a/terraform.tfstate b/terraform.tfstate
index 7c4a6d3d..d012f70d 100644
Binary files a/terraform.tfstate and b/terraform.tfstate differ