How can I change CSP setting?

[dannyshin76]

(I use a local installation of Budibase)
When I try to make an API call to my backend in the app (not using Budibase API proxy), I am getting the following error in the web browser console:
because it violates the following Content Security Policy directive: "connect-src 'self'

My teammate thinks we need a custom setting to "volumes" below in docker-compose.yaml, but it is not working.

proxy-service:
    restart: unless-stopped
    ports:
      - "${MAIN_PORT}:10000"
    container_name: bbproxy
    image: budibase/proxy
    depends_on:
      - minio-service
      - worker-service
      - app-service
      - couchdb-service
    volumes:
      - /home/ec2-user/budibase/bbproxy.nginx.conf:/etc/nginx/templates/nginx.conf.template

Could you advise on how to change the CSP setting?

[mike12345567]

Hi @dannyshin76 - updating the CSP configuration is a bit difficult at the minute, there are two ways you can go about it:

1. Building your own version of the budibase/proxy image - this is contained within the monorepo and can be built using the top level command yarn build:docker:proxy.
2. You can in theory use a volume to replace the nginx.conf.template file that is used as the basis of the container's nginx configuration - to do this you would want to take the base template (https://github.com/Budibase/budibase/blob/develop/hosting/proxy/nginx.prod.conf) and remove the CSP configuration/update it, found on line 53 - then use the volume command as you have it to update the template conf. It is important that the container must be started from fresh with this template volume configured, as it will only be used once at startup, if the container is persisted and simply restarted the configuration will not take.

[apoonawa]

Hi @mike12345567
Would it be possible to give some more detailed instructions on how I could go about implementing option 2 in a self-hosted environment.
So what I am understanding is :

1. Create a new file that is a copy of the base template and make the CSP changes I want
   (Base template : https://github.com/Budibase/budibase/blob/develop/hosting/proxy/nginx.prod.conf)
2. I assume the next step would be to update the docker-compose.yaml file to add a volume that would replace nginx.conf.template with my file.
   (Would it be possible to provide an example of the changes? also what is the path to nginx.conf.template)
3. How would I start the container from fresh. would a "budi hosting --start" suffice? or do I need to restart the server?

[TheDreamFactoryNZ]

Hi @apoonawa did you ever get this sorted out?

[palmendras]

Hi! I'm facing the same issue connecting to an S3 in DigitalOcean Spaces. Was anyone able to fix it?