diff --git a/config/external.yml b/config/external.yml
index 2d2855c..ef09c92 100644
--- a/config/external.yml
+++ b/config/external.yml
@@ -20,6 +20,6 @@ http:
   middlewares:
     homeassistant-headers:
       headers:
-        customRequestHeaders:
-          X-Frame-Options: "ALLOW-FROM *"
-          Content-Security-Policy: "frame-ancestors *"
\ No newline at end of file
+        customResponseHeaders:
+          X-Frame-Options: "ALLOW-FROM *.urmel.de"
+          Content-Security-Policy: "frame-ancestors *.urmel.de"