diff --git a/wrnexus.config.ts b/wrnexus.config.ts
index 28795aa2..67948027 100644
--- a/wrnexus.config.ts
+++ b/wrnexus.config.ts
@@ -40,9 +40,11 @@ const config: AppConfig = {
       directives: {
         "default-src": ["'self'"],
         "img-src": ["'self'", "data:", "https:"],
-        "font-src": ["'self'", "https://fonts.gstatic.com"],
+        "font-src": ["'self'", "data:", "https://fonts.gstatic.com"],
         "style-src": ["'self'", "https://fonts.googleapis.com"],
-        "connect-src": ["'self'"],
+        // The service worker fetches and caches the configured Google Font.
+        // Service-worker fetch() is governed by connect-src as well as font-src.
+        "connect-src": ["'self'", "https://fonts.gstatic.com"],
       },
     },
   },