diff --git a/basic/apps/ninja/invoiceninja-values-configmap.yaml b/basic/apps/ninja/invoiceninja-values-configmap.yaml
index 3cbb4d8..6ea34e4 100644
--- a/basic/apps/ninja/invoiceninja-values-configmap.yaml
+++ b/basic/apps/ninja/invoiceninja-values-configmap.yaml
@@ -13,6 +13,9 @@ data:
       hostname: "ninja.${domain}"
       tls: true
       certManager: true
+        annotations:
+          nginx.ingress.kubernetes.io/configuration-snippet: |
+            more_set_headers "Content-Security-Policy: frame-ancestors 'self' ${nextcloud_domain}";
     persistence:
       public:
         existingClaim: invoiceninja-data
@@ -29,7 +32,7 @@ data:
       auth:
         password: "${redis_password}"
 
-    appURL: "https://ninja.ftt.gmbh"
+    appURL: "https://ninja.${domain}"
     userEmail: "${admin_email}"
     userPassword: "${password}"
     mailer: "smtp" # FIXME use "${outgoing_mail_enabled}"
diff --git a/basic/install.sh b/basic/install.sh
index 0b09e5b..6d19eb4 100755
--- a/basic/install.sh
+++ b/basic/install.sh
@@ -22,3 +22,4 @@ python $(dirname "$0")/../generate_secrets.py invoiceninja
 #python $(dirname "$0")/../generate_secrets.py suitecrm
 #python $(dirname "$0")/../generate_secrets.py kimai
 python $(dirname "$0")/../generate_secrets.py wikijs
+python $(dirname "$0")/../generate_secrets.py nextcloud-home