diff --git a/Makefile b/Makefile
index 6b9e984..eded20f 100644
--- a/Makefile
+++ b/Makefile
@@ -117,15 +117,24 @@ add-plugins:
 	docker exec -u www-data isard-apps-nextcloud-app php occ --no-warnings config:app:set onlyoffice jwt_header --value="Authorization"
 	docker exec -u www-data isard-apps-nextcloud-app php occ --no-warnings config:system:set allow_local_remote_servers  --value=true
 
+	# Add custom admin users
+	##docker exec -u www-data isard-apps-nextcloud-app sh -c 'export OC_PASS=$$NEXTCLOUD_DDADMIN_PASSWORD && php occ user:add --password-from-env --display-name="DD Admin" --group="admin"  ddadmin'
+
 	# Allow nextcloud into other apps iframes
 	# Content-Security-Policy: frame-ancestors 'self' *.$$DOMAIN;
 	docker exec -ti isard-apps-nextcloud-app sed -ie "/protected \\\$$allowedFrameAncestors = \[/{n;s/\('\\\\\'self\\\\\'\)\('\)/\1 *.$$DOMAIN\2/}" /var/www/html/lib/public/AppFramework/Http/ContentSecurityPolicy.php
 
-	# Add custom admin users
-	##docker exec -u www-data isard-apps-nextcloud-app sh -c 'export OC_PASS=$$NEXTCLOUD_DDADMIN_PASSWORD && php occ user:add --password-from-env --display-name="DD Admin" --group="admin"  ddadmin'
+	# Content-Security-Policy: connect-src 'self' *.$$DOMAIN;
+	docker exec -ti isard-apps-nextcloud-app sed -ie "/protected \\\$$allowedConnectDomains = \[/{n;s/\('\\\\\'self\\\\\'\)\('\)/\1 *.$$DOMAIN\2/}" /var/www/html/lib/public/AppFramework/Http/ContentSecurityPolicy.php
 
-	# default labels
-	echo "INSERT INTO oc_systemtag (name, editable) VALUES ('nombre etiqueta', 0);" | docker exec -i isard-apps-postgresql psql -U admin -d nextcloud
+	# Content-Security-Policy: img-src 'self' *.$$DOMAIN;
+	docker exec -ti isard-apps-nextcloud-app sed -ie "/protected \\\$$allowedImageDomains = \[/{n;s/\('\\\\\'self\\\\\'\)\('\)/\1 *.$$DOMAIN\2/}" /var/www/html/lib/public/AppFramework/Http/ContentSecurityPolicy.php
+
+	# Content-Security-Policy: style-src 'self' *.$$DOMAIN;
+	docker exec -ti isard-apps-nextcloud-app sed -ie "/protected \\\$$allowedStyleDomains = \[/{n;s/\('\\\\\'self\\\\\'\)\('\)/\1 *.$$DOMAIN\2/}" /var/www/html/lib/public/AppFramework/Http/ContentSecurityPolicy.php
+
+	# Content-Security-Policy: font-src 'self' *.$$DOMAIN;
+	docker exec -ti isard-apps-nextcloud-app sed -ie "/protected \\\$$allowedFontDomains = \[/{n;s/\('\\\\\'self\\\\\'\)\('\)/\1 *.$$DOMAIN\2/}" /var/www/html/lib/public/AppFramework/Http/ContentSecurityPolicy.php
 
 	# Wordpress
 	## Multisite
diff --git a/docs/img/classrooms.png b/docs/img/classrooms.png
new file mode 100644
index 0000000..31af204
Binary files /dev/null and b/docs/img/classrooms.png differ
diff --git a/docs/img/cloud_storage.png b/docs/img/cloud_storage.png
new file mode 100644
index 0000000..860357a
Binary files /dev/null and b/docs/img/cloud_storage.png differ
diff --git a/docs/index.md b/docs/index.md
new file mode 100644
index 0000000..39d4700
--- /dev/null
+++ b/docs/index.md
@@ -0,0 +1,3 @@
+# Welcome
+
+This site is built by [MkDocs+Gitlab](https://gitlab.com/pages/mkdocs). You can [browse its source code](https://gitlab.com/digitaldemocratic/digitaldemocratic).