csp attempt 3

angular.json

@@ -139,7 +139,14 @@
                   "with": "apps/red-ui/src/environments/environment.prod.ts"
                 }
               ],
-              "optimization": true,
+              "optimization": {
+                "scripts": true,
+                "styles": {
+                  "minify": true,
+                  "inlineCritical": false
+                },
+                "fonts": true
+              },
               "outputHashing": "all",
               "sourceMap": false,
               "namedChunks": false,

docker/common/nginx/nginx.conf

@@ -6,7 +6,7 @@ server {
   root /usr/share/nginx/html;
   # SSL stuff for cloudflare proxy-ing - ignores SSL certificate and uses SNI
 
-  # add_header Content-Security-Policy "default-src 'self'; style-src 'unsafe-inline' 'self'; script-src 'self'";
+  add_header Content-Security-Policy "default-src 'self'; style-src 'unsafe-inline' 'self';";
 
 
   proxy_ssl_verify off;