If you can read me, it means that you misconfigured Lychee.
Please check that:
- your
APP_URL
is properly set to the correct url.
For example:APP_URL=https://lychee.example.com
- if you are working behind a reverse proxy, that
TRUSTED_PROXIES
is set to the forwarding ip.
For example:TRUSTED_PROXIES=*
Note that the wildcard value (*
) is a very insecure option and not recommended. - if you are working behind an apache reverse proxy, that
the forwarding headers are properly set.
For example:RequestHeader set X-Forwarded-Proto https
is set. - if the CSP is blocking your assets because serving http,
you need to force https.
This is done by settingAPP_FORCE_HTTPS=true