Merge branch 'release/v0.13.4'

Author: kbeker

RELEASE-NOTES.md

@@ -1,3 +1,10 @@
+### v0.13.4
+
+##### Bugfixes
+- Bugfix deployment scripts ([#626](https://github.com/Code-Poets/sheetstorm/pull/626))
+
+
+
 ### v0.13.3
 
 ##### Features

sheetstorm-deployment/deploy.yml

@@ -9,4 +9,5 @@
   roles:
     - { role: maintenance_mode, maintenance_mode: enable }
     - configure_sheetstorm_environment
+    - configure_nginx
     - { role: maintenance_mode, maintenance_mode: disable }

sheetstorm-deployment/roles/configure_nginx/templates/shared-security-headers.conf.j2

@@ -11,4 +11,4 @@ add_header X-XSS-Protection "1; mode=block";
 add_header Strict-Transport-Security "max-age=31536000; includeSubdomains; preload";
 
 # Add Content Security Policy header that defines from which sources, browser can download content.
-add_header Content-Security-Policy "base-uri 'self'; form-action 'self'; default-src 'none'; script-src 'self' {% for source in content_security_policy_header.allow_script_sources %}{{ source }} {% endfor %}; connect-src 'self'; img-src 'self' {% for source in content_security_policy_header.allow_image_sources %}{{ source }} {% endfor %}; font-src 'self' {% for source in content_security_policy_header.allow_font_sources %}{{ source }} {% endfor %}; style-src 'self' {% for source in content_security_policy_header.allow_stylesheet_sources %}{{ source }} {% endfor %}; object-src 'none'; frame-ancestors 'none';" always;
+add_header Content-Security-Policy "base-uri 'self'; form-action 'self'; default-src 'none'; script-src 'self' 'unsafe-inline' {% for source in content_security_policy_header.allow_script_sources %}{{ source }} {% endfor %}; connect-src 'self'; img-src 'self' {% for source in content_security_policy_header.allow_image_sources %}{{ source }} {% endfor %}; font-src 'self' {% for source in content_security_policy_header.allow_font_sources %}{{ source }} {% endfor %}; style-src 'self' 'unsafe-inline' {% for source in content_security_policy_header.allow_stylesheet_sources %}{{ source }} {% endfor %}; object-src 'none'; frame-ancestors 'none';" always;