diff --git a/nginx/sites-available/cloud.grupopralog.com.br.conf b/nginx/sites-available/cloud.grupopralog.com.br.conf
index 7b4d93c..1f426d9 100644
--- a/nginx/sites-available/cloud.grupopralog.com.br.conf
+++ b/nginx/sites-available/cloud.grupopralog.com.br.conf
@@ -104,7 +104,7 @@ server {
     add_header X-Content-Type-Options "nosniff" always;
     add_header X-Frame-Options "SAMEORIGIN" always;
     add_header Referrer-Policy "no-referrer" always;
-    add_header Permissions-Policy "geolocation=(), midi=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), fullscreen=(), payment=()" always;
+    add_header Permissions-Policy "geolocation=(), midi=(), sync-xhr='self', microphone=(), camera=(), magnetometer=(), gyroscope=(), fullscreen=(), payment=()" always;
     #add_header Content-Security-Policy "default-src 'none'; base-uri 'none'; manifest-src 'self'; script-src 'nonce-hM7OrLSVwumFk18lv8kzCmeGt8EDVd/0GWKxgzqi5U' 'strict-dynamic'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://srvoffice001.itguys.com.br; font-src 'self' data:; connect-src 'self'; media-src 'self' data:; frame-src 'self' blob: https://srvoffice001.itguys.com.br; frame-ancestors 'self' https://srvoffice001.itguys.com.br; form-action 'self' https://srvoffice001.itguys.com.br;" always;
     proxy_hide_header "X-Content-Type-Options";
     proxy_hide_header "X-Frame-Options"; # Esconde header do backend para não duplicar