diff --git a/nginx/nginx.conf b/nginx/nginx.conf
index 3a25edf..75f3c54 100644
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@@ -5,6 +5,8 @@ upstream gmba_django {
 server {
     listen 80;
 
+    client_max_body_size 256m;
+
     location / {
         proxy_pass http://gmba_django;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
@@ -12,9 +14,9 @@ server {
         proxy_redirect off;
     }
 
-
     location /static/ {
         alias /home/app/app/static/;
     }
 
+    add_header Content-Security-Policy "frame-ancestors https://www.gmba.unibe.ch"
 }