diff --git a/nginx/sites-available/git.itguys.com.br.conf b/nginx/sites-available/git.itguys.com.br.conf
index 25ac5d3..b0a7f0f 100644
--- a/nginx/sites-available/git.itguys.com.br.conf
+++ b/nginx/sites-available/git.itguys.com.br.conf
@@ -85,7 +85,7 @@ server {
     add_header X-XSS-Protection "1; mode=block" always;
     add_header Referrer-Policy "no-referrer-when-downgrade" always;
     # CORREÇÃO: Adicionado *.gravatar.com para permitir o carregamento de avatares.
-    add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: *.gravatar.com; font-src 'self'; object-src 'none'; frame-ancestors 'self';" always;
+    add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: *.gravatar.com; font-src 'self' data:; manifest-src 'self' data:; object-src 'none'; frame-ancestors 'self';" always;
     # =================================================================
     # FIM: Cabeçalhos de Segurança
     # =================================================================