diff --git a/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/VirtualHosts/28BackupPCProxyPass b/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/VirtualHosts/28BackupPCProxyPass
index 94ee2c3..7caaa27 100644
--- a/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/VirtualHosts/28BackupPCProxyPass
+++ b/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/VirtualHosts/28BackupPCProxyPass
@@ -22,6 +22,7 @@
     <Location /BackupPC>
         SSLRequireSSL on
         Require ip $localAccess $externalSSLAccess
+        Header set Content-Security-Policy  "script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'
     </Location>
 
 HERE
diff --git a/smeserver-BackupPC.spec b/smeserver-BackupPC.spec
index 8367016..d112196 100644
--- a/smeserver-BackupPC.spec
+++ b/smeserver-BackupPC.spec
@@ -4,7 +4,7 @@
 
 Name: smeserver-BackupPC
 Version: 0.2
-Release: 19%{?dist}
+Release: 20%{?dist}
 Summary: BackupPC integration into SME server
 
 Group: Applications/System
@@ -52,6 +52,9 @@ This package contains specific configuration for SME server
 #----------------------------------------------------
 
 %changelog
+* Wed Sep 24 2025 Jean-Philippe Pialasse <jpp@koozali.org> 0.2-20.sme
+- relaxed CSP
+
 * Tue Sep 23 2025 Jean-Philippe Pialasse <jpp@koozali.org> 0.2-19.sme
 - fix /run/BackupPC instead of /var prevents service start
 - fix smanager2 display