diff --git a/server/middleware/02.security-headers.js b/server/middleware/02.security-headers.js
index f29ce86..25d0b1a 100644
--- a/server/middleware/02.security-headers.js
+++ b/server/middleware/02.security-headers.js
@@ -20,7 +20,7 @@ export default defineEventHandler((event) => {
       "connect-src 'self' https://api.helcim.com https://myposjs.helcim.com https://plausible.io",
       "frame-src 'self' https://myposjs.helcim.com https://secure.helcim.com",
       "base-uri 'self'",
-      "form-action 'self'",
+      "form-action 'self' https://ghostguild.org",
     ].join('; ')
   }