diff --git a/backend/server.js b/backend/server.js
index 97fa052..4f976d3 100644
--- a/backend/server.js
+++ b/backend/server.js
@@ -12,7 +12,11 @@ const PORT = process.env.PORT || 3001;
 app.use(helmet({
   contentSecurityPolicy: {
     directives: {
-      defaultSrc: ["'self'", "'unsafe-inline'"],
+      defaultSrc: [
+        "'self'",
+        "https://stats.schmelczer.dev",
+        "'unsafe-inline'",
+      ],
       scriptSrc: [
         "'self'",
         "https://stats.schmelczer.dev",