Allow iframes from *.teckids.org

Caddyfile

@@ -4,7 +4,7 @@ http:// {
     file_server
 
     header {
-        Content-Security-Policy "default-src 'self'; img-src 'self' data:; frame-ancestors 'none'; upgrade-insecure-requests; block-all-mixed-content; base-uri 'self'"
+        Content-Security-Policy default-src 'self' *.teckids.org; img-src 'self' data: *.teckids.org; media-src 'self' *.teckids.org; object-src 'self' *.teckids.org; frame-src 'self' *.teckids.org; form-action 'self' *.teckids.org
         X-Content-Type-Options  nosniff
         Referrer-Policy         strict-origin-when-cross-origin
     }