✨(frontend) add configurable ministries domains to add-in CSP

Introduce a variable to define allowed ministries domains in the
CSP configuration for the add-in.

This improves flexibility and avoids hardcoding domain lists.

docker/dinum-frontend/nginx/default.conf

@@ -44,14 +44,15 @@ server {
       add_header Pragma "no-cache" always;
       add_header Expires 0 always;
 
-      set $ms_domains "https://*.live.com https://*.office.com https://*.microsoft.com https://*.office365.com https://*.sharepoint.com";
+      set $ms_domains "https://*.live.com https://*.office.com https://*.microsoft.com https://*.office365.com https://*.sharepoint.com https://*.cloud.microsoft";
+      set $ministries_domains "https://courrieljf.ccomptes.fr";
 
       set $nonce $request_id;
 
       set $csp "upgrade-insecure-requests; ";
-      set $csp "${csp}frame-ancestors ${ms_domains}; ";
+      set $csp "${csp}frame-ancestors ${ms_domains} ${ministries_domains}; ";
       set $csp "${csp}script-src 'nonce-${nonce}' 'strict-dynamic'; ";
-      set $csp "${csp}connect-src 'self' ${ms_domains}; ";
+      set $csp "${csp}connect-src 'self' ${ms_domains} ${ministries_domains}; ";
       set $csp "${csp}frame-src 'none'; ";
       set $csp "${csp}object-src 'none'; ";
       set $csp "${csp}base-uri 'none'; ";