Dec 6, 2021 · Dec 2, 2021 · Dec 5, 2021
diff --git a/_docs/administration/codefresh-on-prem.md b/_docs/administration/codefresh-on-prem.md

 Both http and https target port should be set to **80**.

 ### Configure CSP (Content Security Policy)
 Add CSP environment variables to `config.yaml`, and define the values to be returned in the CSP HTTP headers.
 ```yaml
 cfui:
  env:
    CONTENT_SECURITY_POLICY: "<YOUR SECURITY POLICIES>"
    CONTENT_SECURITY_POLICY_REPORT_ONLY: "default-src 'self'; font-src 'self'
      https://fonts.gstatic.com; script-src 'self' https://unpkg.com https://js.stripe.com;
      style-src 'self' https://fonts.googleapis.com; 'unsafe-eval' 'unsafe-inline'"
    CONTENT_SECURITY_POLICY_REPORT_TO: "<LIST OF ENDPOINTS AS JSON OBJECTS>"
 ```
 `CONTENT_SECURITY_POLICY` is the string describing content policies. Use semi-colons to separate between policies.
 `CONTENT_SECURITY_POLICY_REPORT_TO` is a comma-separated list of JSON objects. Each object must have a name and an array of endpoints that receive the incoming CSP reports.

 For detailed information, see the [Content Security Policy article on MDN](https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP).
 ## Using existing external services for data storage/messaging

 Normally the Codefresh installer, is taking care of all needed dependencies internally by deploying the respective services (mongo, redis etc) on its own.
Original file line number	Diff line number	Diff line change
Expand Up		@@ -559,7 +559,21 @@ spec:

		Both http and https target port should be set to 80.

		### Configure CSP (Content Security Policy)
		Add CSP environment variables to `config.yaml`, and define the values to be returned in the CSP HTTP headers.
		```yaml
		cfui:
		env:
		CONTENT_SECURITY_POLICY: "<YOUR SECURITY POLICIES>"
		CONTENT_SECURITY_POLICY_REPORT_ONLY: "default-src 'self'; font-src 'self'
		https://fonts.gstatic.com; script-src 'self' https://unpkg.com https://js.stripe.com;
		style-src 'self' https://fonts.googleapis.com; 'unsafe-eval' 'unsafe-inline'"
		CONTENT_SECURITY_POLICY_REPORT_TO: "<LIST OF ENDPOINTS AS JSON OBJECTS>"
		```
		`CONTENT_SECURITY_POLICY` is the string describing content policies. Use semi-colons to separate between policies.
		`CONTENT_SECURITY_POLICY_REPORT_TO` is a comma-separated list of JSON objects. Each object must have a name and an array of endpoints that receive the incoming CSP reports.

		For detailed information, see the [Content Security Policy article on MDN](https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP).
		## Using existing external services for data storage/messaging

		Normally the Codefresh installer, is taking care of all needed dependencies internally by deploying the respective services (mongo, redis etc) on its own.
Expand Down