diff --git a/terraform/keycloak.tf b/terraform/keycloak.tf
index b3374cc..12135bf 100644
--- a/terraform/keycloak.tf
+++ b/terraform/keycloak.tf
@@ -27,6 +27,10 @@ resource "keycloak_realm" "twomartens_realm" {
     brute_force_detection {
       max_login_failures = 5
     }
+
+    headers {
+      content_security_policy = "frame-src 'self'; frame-ancestors 'self' http://localhost:4200; object-src 'none';"
+    }
   }
 
   default_signature_algorithm = "ES256"
@@ -111,3 +115,13 @@ resource "keycloak_openid_client" "twomartens_nextcloud" {
     "https://cloud.2martens.de/*"
   ]
 }
+
+resource "keycloak_openid_client" "twomartens_timetable_frontend" {
+  realm_id              = keycloak_realm.twomartens_realm.id
+  name                  = "Timetable Frontend"
+  enabled               = true
+  access_type           = "PUBLIC"
+  client_id             = "tsw-timetable-frontend"
+  standard_flow_enabled = true
+  use_refresh_tokens    = false
+}
\ No newline at end of file
diff --git a/terraform/variables.tf b/terraform/variables.tf
index b528cec..3954d3b 100644
--- a/terraform/variables.tf
+++ b/terraform/variables.tf
@@ -120,4 +120,4 @@ variable "nextcloud_client_secret" {
   description = "Client Secret of the Nextcloud OpenID client"
   type        = string
   sensitive   = true
-}
\ No newline at end of file
+}