From 6e8856484e7ca3d12204f84a8065621b4cd06eb6 Mon Sep 17 00:00:00 2001
From: Eduard Tihomirov <tikhomirov@micord.ru>
Date: Thu, 27 Feb 2025 10:48:36 +0300
Subject: [PATCH] SUPPORT-8965: Fix

---
 Dockerfile                 | 2 +-
 config/nginx.conf.template | 2 +-
 html/index.html            | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 595ae71..8cc7ab2 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -7,4 +7,4 @@ ENV LKRP_UL_URL="https://lkrp-dev.micord.ru/ul/"
 ENV LKRP_UL_LANDING="https://lkrp-dev.micord.ru/ul/#/home"
 ENV LKRP_FL_URL="https://lkrp-dev.micord.ru/fl/"
 ENV LKRP_FL_LANDING="https://lkrp-dev.micord.ru/fl/#/home"
-ENV LKRP_CRT_CHECK_URL="https://lkrp-dev2.micord.ru"
+ENV LKRP_CRT_CHECK_URL="https://e-trust.gosuslugi.ru"
diff --git a/config/nginx.conf.template b/config/nginx.conf.template
index 88f5995..42b664b 100644
--- a/config/nginx.conf.template
+++ b/config/nginx.conf.template
@@ -57,7 +57,7 @@ server {
         index index.html;
         expires -1;
 
-        add_header Content-Security-Policy "frame-ancestors 'none'; default-src 'self'; connect-src 'self' https://www.sberbank.ru; script-src 'self'; style-src 'unsafe-inline' 'self' data:; font-src 'self' data:; img-src 'self' data:;";
+        add_header Content-Security-Policy "frame-ancestors 'none'; default-src 'self'; connect-src 'self' https://e-trust.gosuslugi.ru; script-src 'self'; style-src 'unsafe-inline' 'self' data:; font-src 'self' data:; img-src 'self' data:;";
 
 	    # Media: images, icons, video, audio, HTC
 	    location ~* \.(?:jpg|jpeg|gif|png|ico|cur|gz|svg|svgz|mp4|mp3|ogg|ogv|webm|htc|woff2|woff|ttf)$ {
diff --git a/html/index.html b/html/index.html
index 859c0b1..70687c0 100644
--- a/html/index.html
+++ b/html/index.html
@@ -5,7 +5,7 @@
 		<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 		<meta name="viewport" content="width=device-width, initial-scale=1">
 		<meta http-equiv="Content-Security-Policy"
-			  content="default-src 'self'; connect-src 'self' https://www.sberbank.ru; script-src 'self'; style-src 'unsafe-inline' 'self' data:; font-src 'self' data:; img-src 'self' data:"/>
+			  content="default-src 'self'; connect-src 'self' https://e-trust.gosuslugi.ru; script-src 'self'; style-src 'unsafe-inline' 'self' data:; font-src 'self' data:; img-src 'self' data:"/>
 		<meta name="referrer" content="strict-origin-when-cross-origin"/>
 		<script src="script/cert-checker.js"></script>
 	</head>