Vaultwarden web page CSP and CORS issues

I built a Vaultwarden, and the login page is: https://bitwarden.wangyifang.com/

I also wrapped it with Cloudflare, and in Cloudflare, I used Zaraz to add a statistical code to all web pages:

Then the problem came up, I asked AI, by default, it is said that ngnix should accept all without configuration, that is, CSP and CORS should be set to accept all, just like Baidu statistics in the statistics; but why when accessing the bitwarden web page, the “analytics.js” cannot be accessed, and it shows: (Blocked: csp)