Help CSP Error when behind caddy (reverse-proxy)

When I login I get a blank page, the console shows these errors. Is this a bug where keycloak is still loading some assets over http instead of https?

Content Security Policy: The page’s settings observed the loading of a resource at inline (“script-src”). A CSP report is being sent. console:19:1
Content Security Policy: The page’s settings observed the loading of a resource at eval (“script-src”). A CSP report is being sent. angular.js:1291:6
Content Security Policy: The page’s settings observed the loading of a resource at http://localhost/auth/js/keycloak.js?version=7sq3p (“script-src”). A CSP report is being sent.
Content Security Policy: The page’s settings blocked the loading of a resource at localhost/auth/realms/master/protocol/openid-connect/login-status-iframe.html?version=7sq3p (“frame-src”). keycloak.js:1219:26
Content Security Policy: The page’s settings observed the loading of a resource at localhost/auth/realms/master/protocol/openid-connect/login-status-iframe.html?version=7sq3p (“frame-src”). A CSP report is being sent.

I use caddy 2:

caddy reverse-proxy --from localhost --to 192.168.1.101:8080

When I try and login I get a blank page.

I suspect that we’ve run into the same or a similar issue with 10.0.0 or 10.0.0.1.

Please add your findings and comments here: https://issues.redhat.com/browse/KEYCLOAK-14107