diff --git a/next.config.js b/next.config.js
index 8efb45bc..061a48aa 100644
--- a/next.config.js
+++ b/next.config.js
@@ -4,13 +4,15 @@ const pkg = require('./package.json');
 
 const CLOUD_URL = 'https://cloud.umami.is';
 
+const EMBED_HOSTED_URL = process.env.EMBED_HOSTED_URL
+
 const contentSecurityPolicy = `
   default-src 'self';
   img-src *;
   script-src 'self' 'unsafe-eval';
   style-src 'self' 'unsafe-inline';
   connect-src 'self' api.umami.is;
-  frame-ancestors 'self';
+  frame-ancestors `self ${EMBED_HOSTED_URL}`;
 `;
 
 const headers = [