CSS is blocked by Content-Security-Policy here, but that doesn't really matter
It worked in the brief http window before you put the 301 to https in place. The link rel="stylesheet" is fine, the problem is the hardcoded http in base href. Changing it to https or removing base allows the css to pass the sameorigin check.