Instead of injecting CSP nonce, which does not work because nginx configuration is overwriting the header