diff --git a/common/src/main/resources/de/bluecolored/bluemap/config/webserver.conf b/common/src/main/resources/de/bluecolored/bluemap/config/webserver.conf
index 67252e6ef..84b99b730 100644
--- a/common/src/main/resources/de/bluecolored/bluemap/config/webserver.conf
+++ b/common/src/main/resources/de/bluecolored/bluemap/config/webserver.conf
@@ -24,9 +24,9 @@ sse-enabled: true
 # Additional headers the webserver should include in the responses it sends.
 # Default is none
 additional-headers: {
-  "Cache-Control": "public, max-age=86400"
-  "Cloudflare-CDN-Cache-Control": "max-age=60, stale-if-error=604800"
-  # "Content-Security-Policy": "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; object-src 'none';"
+  "Cache-Control": "public, max-age=86400, stale-if-error=604800"
+  "CDN-Cache-Control": "max-age=60"
+  # "Content-Security-Policy": "default-src 'self'; connect-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; object-src 'none';"
   # "X-Frame-Options": "SAMEORIGIN"
   # "X-Content-Type-Options": "nosniff"
   # "Referrer-Policy": "strict-origin-when-cross-origin"