diff --git a/Makefile b/Makefile
index 6a7d3db..32cae74 100644
--- a/Makefile
+++ b/Makefile
@@ -12,7 +12,9 @@ WWW_RSYNC_DEST = $(USER):$(WWW_ROOT)
 GEMINI_RSYNC_DEST = $(USER):$(GEMINI_ROOT)
 
 OUTPUT_DIR = public
-RSYNCFLAGS += -rlvz --zc=zstd
+RSYNCFLAGS += -rlcv --zc=zstd --zl=6
+# include br, jxl, and gmi in skip-compress
+RSYNCFLAGS += --skip-compress=gz/br/zst/png/webp/jpg/avif/jxl/mp4/mkv/webm/opus/mp3
 # compression has dimishing returns after this point
 ECT_LEVEL=70109
 
diff --git a/config.toml b/config.toml
index e2df06d..8a2573d 100644
--- a/config.toml
+++ b/config.toml
@@ -125,6 +125,6 @@ Referrer-Policy = "no-referrer"
 X-XSS-Protection = "1; mode=block"
 X-FROG-UNSAFE = "1"
 X-UA-Compatible = "IE=edge"
-Content-Security-Policy = "default-src 'none'; img-src 'self' https://seirdy.one data:; style-src 'self'; script-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'none'; manifest-src 'self'; upgrade-insecure-requests;"
+Content-Security-Policy = "default-src 'none'; img-src 'self' https://seirdy.one data:; style-src 'unsafe-inline'; script-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'none'; manifest-src 'self'; upgrade-insecure-requests;"
 Permissions-Policy = "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()"
 Cache-Control = "max-age=120, no-transform"