error_page 500 502 503 504 /500.html;
location = /500.html {
  root /opt/pleroma/instance/static/static/error/500;
  internal;
    add_header Strict-Transport-Security "max-age=31536000; includeSubdomains; preload";
    add_header X-Content-Type-Options "nosniff";
    add_header X-XSS-Protection "1; mode=block";
    add_header X-Permitted_Cross-Domain-Policies none;
    add_header X-Frame-Options "self";
    add_header Referrer-Policy "same-origin";
    add_header X-Download-Options noopen;

    # CSP
    add_header Content-Security-Policy "default-src 'none'; connect-src 'self'; font-src 'self'; img-src 'self' https: data:; media-src 'self' https:; script-src 'self'; style-src 'self' 'unsafe-inline'; worker-src 'self'; frame-ancestors 'self'";
}