diff --git a/017-umami.conf b/017-umami.conf
index 1ffb352..1ac65c8 100644
--- a/017-umami.conf
+++ b/017-umami.conf
@@ -50,5 +50,5 @@ server {
     }
 
     include global/restrictions.conf;
-    include global/php.conf;
+    #include global/php.conf;
 }
diff --git a/101-slg-uetze.conf b/101-slg-uetze.conf
index 4daa6a8..48277ed 100644
--- a/101-slg-uetze.conf
+++ b/101-slg-uetze.conf
@@ -36,7 +36,7 @@ server {
     add_header X-Frame-Options "SAMEORIGIN";
     add_header X-Content-Type-Options nosniff;
     add_header X-XSS-Protection "1; mode=block";
-    add_header Content-Security-Policy "default-src 'none'; child-src 'self'; connect-src 'self'; img-src 'self' data: https: *.gravatar.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' cdn.jsdelivr.net api.instagram.com pagead2.googlesyndication.com; style-src 'self' 'unsafe-inline' https: fonts.googleapis.com; font-src 'self' data: https: fonts.googleapis.com themes.googleusercontent.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' www.paypal.com; media-src https:;";
+    add_header Content-Security-Policy "default-src 'none'; child-src 'self'; connect-src 'self' localhost umami.solusar.de; img-src 'self' data: https: *.gravatar.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' localhost umami.solusar.de cdn.jsdelivr.net api.instagram.com pagead2.googlesyndication.com; style-src 'self' 'unsafe-inline' https: fonts.googleapis.com; font-src 'self' data: https: fonts.googleapis.com themes.googleusercontent.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' www.paypal.com; media-src https:;";
 
     #limit_req zone=one burst=10;
 
diff --git a/default b/default
index 52f19ac..81d4c05 100644
--- a/default
+++ b/default
@@ -36,7 +36,7 @@ server {
     add_header X-Frame-Options "SAMEORIGIN";
     add_header X-Content-Type-Options nosniff;
     add_header X-XSS-Protection "1; mode=block";
-    add_header Content-Security-Policy "default-src 'none'; child-src 'self'; connect-src 'self'; img-src 'self' data: https: *.gravatar.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' cdn.jsdelivr.net api.instagram.com pagead2.googlesyndication.com; style-src 'self' 'unsafe-inline' https: fonts.googleapis.com; font-src 'self' data: https: fonts.googleapis.com themes.googleusercontent.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' www.paypal.com; media-src https:;";
+    add_header Content-Security-Policy "default-src 'none'; child-src 'self'; connect-src 'self' localhost umami.solusar.de; img-src 'self' data: https: *.gravatar.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' localhost umami.solusar.de cdn.jsdelivr.net api.instagram.com pagead2.googlesyndication.com; style-src 'self' 'unsafe-inline' https: fonts.googleapis.com; font-src 'self' data: https: fonts.googleapis.com themes.googleusercontent.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' www.paypal.com; media-src https:;";
 
     #limit_req zone=one burst=10;