From be10e01c2f80d321924a56e7ab9bb35933156f4b Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Sat, 17 Jan 2026 18:16:45 -0300
Subject: [PATCH] comms: serve host-specific Element config alias

---
 services/comms/helmrelease.yaml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/services/comms/helmrelease.yaml b/services/comms/helmrelease.yaml
index b907d38..406ab51 100644
--- a/services/comms/helmrelease.yaml
+++ b/services/comms/helmrelease.yaml
@@ -382,6 +382,14 @@ spec:
         url: https://call.live.bstein.dev
         participant_limit: 16
         brand: Othrys Call
+    nginxConfig: |-
+      add_header X-Frame-Options SAMEORIGIN;
+      add_header X-Content-Type-Options nosniff;
+      add_header X-XSS-Protection "1; mode=block";
+      add_header Content-Security-Policy "frame-ancestors 'self'";
+      location = /config.live.bstein.dev.json {
+        try_files /config.json =404;
+      }
 
     ingress:
       enabled: true