Please check that: your APP_URL is properly set to the correct url. For example: APP_URL=https://lychee.example.com if you are working behind a reverse proxy, that TRUSTED_PROXIES is set to the forwarding ip. For example: TRUSTED_PROXIES=* Note that the wildcard value ( * ) is a very insecure option and not recommended. if you are working behind an apache reverse proxy, that the forwarding headers are properly set. For example: RequestHeader set X-Forwarded-Proto https is set. if the CSP is blocking your as