diff --git a/apps/web/next.config.mjs b/apps/web/next.config.mjs
index 3135ae0..e894b72 100644
--- a/apps/web/next.config.mjs
+++ b/apps/web/next.config.mjs
@@ -12,7 +12,7 @@ const csp = [
   "default-src 'self'",
   "script-src 'self' 'unsafe-inline'",
   "style-src 'self' 'unsafe-inline'",
-  "img-src 'self' data:",
+  "img-src 'self' data: https://built.indie.pit.world https://pwamart.com",
   "font-src 'self' data:",
   // The download page reads release metadata from the GitHub API.
   "connect-src 'self' https://api.github.com",