diff --git a/example/images/paperless-ngx/Dockerfile b/example/images/paperless-ngx/Dockerfile
index cb2cc73..011b030 100644
--- a/example/images/paperless-ngx/Dockerfile
+++ b/example/images/paperless-ngx/Dockerfile
@@ -2,7 +2,7 @@
 
 FROM python:3.11-alpine AS builder
 
-ARG PAPERLESS_VERSION=2.4.2
+ARG PAPERLESS_VERSION=2.4.3
 
 WORKDIR /opt
 
diff --git a/example/paperless-ngx.nomad.hcl b/example/paperless-ngx.nomad.hcl
index 4d6ba78..2feff71 100644
--- a/example/paperless-ngx.nomad.hcl
+++ b/example/paperless-ngx.nomad.hcl
@@ -63,7 +63,8 @@ job "paperless" {
         "traefik.enable=true",
         "traefik.http.routers.paperless.rule=Host(`paperless.example.org`)",
         "traefik.http.routers.paperless.entrypoints=https",
-        "traefik.http.routers.paperless.middlewares=rate-limit-std@file,inflight-std@file,security-headers@file,hsts@file",
+        "traefik.http.middlewares.paperless-csp.headers.contentsecuritypolicy=default-src 'self';font-src 'self' data:;img-src 'self' data:;script-src 'self' 'unsafe-inline' 'unsafe-eval';style-src 'self' 'unsafe-inline';",
+        "traefik.http.routers.paperless.middlewares=security-headers@file,rate-limit-std@file,forward-proto@file,inflight-std@file,hsts@file,compression@file,paperless-csp",
 
       ]
     }
@@ -138,7 +139,7 @@ _EOT
       driver = "docker"
 
       config {
-        image           = "danielberteaud/paperless-ngx:2.4.2-1"
+        image           = "danielberteaud/paperless-ngx:2.4.3-1"
         readonly_rootfs = true
         pids_limit      = 200
       }
@@ -216,7 +217,7 @@ _EOT
       }
 
       config {
-        image           = "danielberteaud/paperless-ngx:2.4.2-1"
+        image           = "danielberteaud/paperless-ngx:2.4.3-1"
         readonly_rootfs = true
         pids_limit      = 100
       }
@@ -295,7 +296,7 @@ _EOT
       }
 
       config {
-        image           = "danielberteaud/paperless-ngx:2.4.2-1"
+        image           = "danielberteaud/paperless-ngx:2.4.3-1"
         readonly_rootfs = true
         pids_limit      = 100
       }
@@ -374,7 +375,7 @@ _EOT
       }
 
       config {
-        image           = "danielberteaud/paperless-ngx:2.4.2-1"
+        image           = "danielberteaud/paperless-ngx:2.4.3-1"
         readonly_rootfs = true
         pids_limit      = 300
       }
diff --git a/variables.yml b/variables.yml
index d623adb..3fa0aa1 100644
--- a/variables.yml
+++ b/variables.yml
@@ -6,7 +6,7 @@ instance: paperless
 paperless:
 
   # Version to use
-  version: 2.4.2
+  version: 2.4.3
 
   # Connect to the postgres service through the mesh
   consul:
@@ -61,8 +61,7 @@ paperless:
     public_url: https://paperless.example.org
 
     # Traefik settings
-    traefik:
-      enabled: true
+    traefik: {}
 
   # The consumer will watch a folder (/input, where a volume is mounted) and
   # import any files found.