diff --git a/conf.d/nextcloud.shore.co.il.conf b/conf.d/nextcloud.shore.co.il.conf
index cb4389cb72f130e14a19005d9f4b9a8b79657dd3..0ad4562ea89d59ae698b9da1b09139184c0f676e 100644
--- a/conf.d/nextcloud.shore.co.il.conf
+++ b/conf.d/nextcloud.shore.co.il.conf
@@ -21,6 +21,9 @@ server {
     include     snippets/ssl.conf;
     include     snippets/nextcloud-well-known.conf;
 
+    # Allow to include iframes in code.shore.co.il.
+    add_header  Content-Security-Policy "frame-ancestors https://code.shore.co.il";
+
     location / {
         proxy_pass              http://$nextcloud$request_uri;
         proxy_http_version      1.1;