diff --git a/config/http/default.nix b/config/http/default.nix
index bda60d7..bbfc752 100644
--- a/config/http/default.nix
+++ b/config/http/default.nix
@@ -16,7 +16,7 @@ in {
     recommendedBrotliSettings = true;
 
     appendHttpConfig = ''
-      add_header Content-Security-Policy "default-src 'self'; object-src 'none'; base-uri 'none';" always;
+      add_header Content-Security-Policy "object-src 'none'; base-uri 'none';" always;
       add_header 'Referrer-Policy' 'origin-when-cross-origin';
       add_header X-Frame-Options DENY;
       add_header X-Content-Type-Options nosniff;