If you can read me, it means that you misconfigured Lychee.

Please check that:

your
```
APP_URL
```
is properly set to the correct url.
For example:
```
APP_URL=https://lychee.example.com
```
if you are working behind a reverse proxy, that
```
TRUSTED_PROXIES
```
is set to the forwarding ip.
For example:
```
TRUSTED_PROXIES=*
```
Note that the wildcard value (
```
*
```
) is a very insecure option and not recommended.
if you are working behind an apache reverse proxy, that the forwarding headers are properly set.
For example:
```
RequestHeader set X-Forwarded-Proto https
```
is set.
if the CSP is blocking your assets because serving http, you need to force https.
This is done by setting
```
APP_FORCE_HTTPS=true
```

Bundeslager 2008