diff --git a/h5bp/basic.conf b/h5bp/basic.conf
index f63b4a7..477a6db 100644
--- a/h5bp/basic.conf
+++ b/h5bp/basic.conf
@@ -2,7 +2,6 @@
 # https://github.com/h5bp/server-configs-nginx
 
 include h5bp/internet_explorer/x-ua-compatible.conf;
-include h5bp/security/content-security-policy.conf;
 include h5bp/security/referrer-policy.conf;
 include h5bp/security/x-content-type-options.conf;
 include h5bp/security/x-frame-options.conf;
diff --git a/test/vhosts/server.localhost.conf b/test/vhosts/server.localhost.conf
index fdbb837..b345333 100644
--- a/test/vhosts/server.localhost.conf
+++ b/test/vhosts/server.localhost.conf
@@ -19,6 +19,7 @@ server {
 
   gzip_min_length 1;
 
+  include h5bp/security/content-security-policy.conf;
   include h5bp/location/web_performance_filename-based_cache_busting.conf;
   include h5bp/location/web_performance_svgz-compression.conf;
   include h5bp/errors/custom_errors.conf;