Hye @JimboJoe,
after more investigations, rules from nextCloud and tests :)
L23```more_set_headers Content-Security-Policy "default-src data:;";```
is enough due to **/ynhpanel.css** where yunohost image tile and fonts
are **data:base64**.
There is no SP leaks in this case.
I'll send rectification in this way.
ownCloud 9.0 comes with improved occ which allows to install easily from
the command-line. This install rewrite uses those new facilities and also uses
the config:import command to set system and LDAP configuration.
Rafi59
bogdanovic
Jérôme Lebleu