@pawlicker @mint @Tadano @cassidyclown @ne @neet @ryo Broken profile pic is normal if you aren't accessing it over Tor or proxy that selectively routes Tor. Mediaproxy is sadly broken, but it should redirect you anyway if redirect_on_failure is set to true.
https://git.pleroma.social/pleroma/pleroma/-/issues/2861
If you don't use it, then CSP rules might be an issue. Hide them and override with modified ones in nginx. These are derived from default Pleroma ones, so don't worry much.
add_header Content-Security-Policy "script-src 'self';connect-src 'self' blob: https://pawlicker.ddns.net wss://pawlicker.ddns.net;media-src 'self' https: http:;img-src 'self' data: blob: https: http:;default-src 'none';base-uri 'self';frame-ancestors 'none';style-src 'self' 'unsafe-inline';font-src 'self';manifest-src 'self'";
proxy_hide_header content-security-policy;