When I visit my domain name, it prompts the following error

[KevinTMitnick]

Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' https://bitclout.com/ https://cdn.jsdelivr.net/npm/sweetalert2@10 https://kit.fontawesome.com/070ca4195b.js https://ka-f.fontawesome.com/". Either the 'unsafe-inline' keyword, a hash ('sha256-rwMOiOeVICH7/Cjy5SkreID3OOi5HTrit357k22hUDQ='), or a nonce ('nonce-...') is required to enable inline execution.

my Caddyfile:

{
    admin off
    auto_https off
}

http://deso.webigwallet.com:8080 {
    file_server
    try_files {path} index.html

    header Access-Control-Allow-Methods "GET, PUT, POST, DELETE, OPTIONS"
    header Access-Control-Allow-Origin "*"
    header Content-Security-Policy "
      default-src 'self';
      connect-src 'self'
        deso.webigwallet.com:* api.deso.webigwallet.com:*
	api.bitclout.com bitclout.com:*
        bithunt.bitclout.com pulse.bitclout.com https://altumbase.com
        api.bitpop.dev
        deso.run:* api.deso.run:*
        localhost:*
        explorer.bitclout.com:*
        https://api.blockchain.com/ticker
        https://api.blockchain.com/mempool/fees
        https://ka-f.fontawesome.com/
        bitcoinfees.earn.com
        api.blockcypher.com
        amp.bitclout.com
        api.bitclout.green api.bitclout.blue
        api.bitclout.navy
        api.testwyre.com
        api.sendwyre.com
        https://videodelivery.net
        https://upload.videodelivery.net;
      script-src 'self' https://bitclout.com/  https://cdn.jsdelivr.net/npm/sweetalert2@10
        https://kit.fontawesome.com/070ca4195b.js https://ka-f.fontawesome.com/;
      style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;
      img-src 'self' data: i.imgur.com images.deso.org images.bitclout.com quickchart.io arweave.net *.arweave.net cloudflare-ipfs.com;
      font-src 'self' https://fonts.googleapis.com
        https://fonts.gstatic.com https://ka-f.fontawesome.com;
      frame-src 'self' localhost:*
        identity.bitclout.com identity.bitclout.blue identity.bitclout.green
        identity.deso.org identity.deso.blue identity.deso.green
        https://www.youtube.com
        https://player.vimeo.com
        https://www.tiktok.com
        https://giphy.com
        https://open.spotify.com
        https://w.soundcloud.com
        https://player.twitch.com
        https://clips.twitch.com
        pay.testwyre.com
        pay.sendwyre.com
        https://iframe.videodelivery.net;"
}