diff --git a/app/cryptpad/deploy/cryptpad.hcl b/app/cryptpad/deploy/cryptpad.hcl
index 7880cad..cee0f1f 100644
--- a/app/cryptpad/deploy/cryptpad.hcl
+++ b/app/cryptpad/deploy/cryptpad.hcl
@@ -48,6 +48,8 @@ job "cryptpad" {
         port = "unsafe"
         tags = [
           "tricot pad.deuxfleurs.fr",
+          "tricot-add-header Cross-Origin-Resource-Policy cross-origin",
+          "tricot-add-header Cross-Origin-Embedder-Policy require-corp",
         ]
         check {
           type = "http"
@@ -61,6 +63,8 @@ job "cryptpad" {
         port = "sandbox"
         tags = [
           "tricot pad-sandbox.deuxfleurs.fr",
+          "tricot-add-header Cross-Origin-Resource-Policy cross-origin",
+          "tricot-add-header Cross-Origin-Embedder-Policy require-corp",
         ]
         check {
           type = "http"