Content Security Policy: The settings of the page have blocked the loading of a resource ("script-src")

installation
11

So you didn’t use docker-compose?

Yes, the standard install requires ports 80 and 443 and turns on https and force_https. You shouldn’t have the problem that you describe if you did a standard install.

You ran discourse-setup to install?