diff --git a/app/models/communication/website/with_security.rb b/app/models/communication/website/with_security.rb
index 94e4a3ea981928fc3cd4ef9e8624cbc8c1a57f77..9313daea312d19ea19587e39ca4efd5c83a213c9 100644
--- a/app/models/communication/website/with_security.rb
+++ b/app/models/communication/website/with_security.rb
@@ -16,11 +16,11 @@ module Communication::Website::WithSecurity
 
   def external_domains_default
     [
-      'osuny-1b4da.kxcdn.com',      # KeyCDN for assets resize
+      ENV['KEYCDN_HOST'],           # KeyCDN for assets resize
       '*.osuny.org',                # Osuny for assets resize
       'osuny.s3.fr-par.scw.cloud',  # Scaleway for direct assets
-      'tile.openstreetmap.org'      # Open Street Map default tiles 
-    ]
+      'tile.openstreetmap.org'      # Open Street Map default tiles
+    ].compact
   end
 
   def external_domains_plausible
diff --git a/config/application.sample.yml b/config/application.sample.yml
index 02c0dbb10cf5be4547248b15f85b179c9ffc50d5..1791af25fe9aa85b623cab112eca5bc8134255f2 100644
--- a/config/application.sample.yml
+++ b/config/application.sample.yml
@@ -6,8 +6,8 @@ BUGSNAG_RUBY_KEY:
 GITHUB_WEBSITE_THEME_BRANCH:
 GITHUB_WEBSITE_THEME_PATH:
 GITHUB_WEBSITE_THEME_REPOSITORY:
-GITHUB_WEBSITE_TEMPLATE_REPOSITORY: 
-GITHUB_ACCESS_TOKEN: 
+GITHUB_WEBSITE_TEMPLATE_REPOSITORY:
+GITHUB_ACCESS_TOKEN:
 
 MAIL_FROM_DEFAULT_ADDRESS:
 MAIL_FROM_DEFAULT_NAME:
@@ -27,6 +27,8 @@ SCALEWAY_OS_ENDPOINT:
 SCALEWAY_OS_REGION:
 SCALEWAY_OS_SECRET_ACCESS_KEY:
 
+KEYCDN_HOST:
+
 SECRET_KEY_BASE:
 
 SEND_IN_BLUE_API_KEY:
@@ -38,8 +40,8 @@ UNSPLASH_ACCESS_KEY:
 UNSPLASH_SECRET:
 PEXELS_API_KEY:
 
-DEUXFLEURS_USER: 
-DEUXFLEURS_PASSWORD: 
+DEUXFLEURS_USER:
+DEUXFLEURS_PASSWORD:
 
 MAINTENANCE: "false"
 
@@ -53,4 +55,3 @@ TEST_GITLAB_BRANCH:
 TEST_GITLAB_ENDPOINT:
 TEST_GITLAB_TOKEN:
 TEST_GITLAB_REPOSITORY:
-