Ok, i think we tracked down the issue; we’ll need to enable non-https requests in cef.
In the meantime, if you use a domain name and add a SSL certificate (via letsencrypt!) - there’s good of tutorials on Digital Ocean on how to do this, and a guide here - this will not be an issue anymore (and the internet will be a safer place!).