I have created a CentOS 7 droplet on DigitalOcean and installed and configured ipa-server 4.6.4 following DigitalOcean's how-to. Connecting from Firefox 67 gets a blank page; connecting from Chromium works. The developer console on Firefox 67 gives errors about Content Security Policy for "script-src"; searching the httpd config files and IPA pages on my droplet, the only CSP it applies is:
/etc/httpd/conf.d/ipa.conf: Header always append Content-Security-Policy "frame-ancestors 'none'"
How do I fix either FreeIPA or Firefox for them to work together?