hackmd: SSL, temporary CSP'fix

roles/hackmd/templates/config.json.j2

@@ -1,6 +1,7 @@
 {
     "production": {
         "domain": "{{ hackmd_domain }}",
+        "protocolUseSSL": true,
         "_hsts": {
             "enable": true,
             "maxAgeSeconds": "31536000",
@@ -8,9 +9,8 @@
             "preload": true
         },
         "csp": {
-            "enable": true,
+            "enable": false,
             "directives": {
-                "imgSrc": ["self", "unsafe-inline"]
             },
             "upgradeInsecureRequests": "auto",
             "addDefaults": true,
@@ -35,7 +35,6 @@
             "usernameField": "cn",
             "useridField": "uid",
             "tlsca": "/etc/ldap/ssl/BKCA.crt"
-            }
         },
         "email": false
     }