Migrating site to on prem and getting - a frame ancestor error in the new site

Running latest version in docker on ubuntu 20.4
I’ve gone through the import directions here:

Site is up at:


Clicking on the “coinlist.co” link at the top of blog gives an error in the dev console:

Refused to frame ‘https://coinlist.co/’ because an ancestor violates the following Content Security Policy directive: “frame-ancestors ‘self’”.

I guess the question is - where can I update the CSP