New Install with Multisite Enabled Questions

Hello,

I’ve currently am taking Bedrock for a spin locally on my Mac using MAMP PRO (Latest). I have the network stood up with one extra sub site using the sub-domain approach. Perhaps I’ve missed something but I’m seeing for example these types of errors in my console.

Mixed Content: The page at 'https://site2.local-wordpress.local/' was loaded over HTTPS, but requested an insecure stylesheet 'http://local-wordpress.local/app/themes/twentytwentyfive/style.css?ver=1.2'. This request has been blocked; the content must be served over HTTPS.

Why are the theme assets being served from http and not https?

GET https://site2.local-wordpress.local/local-wordpress.local/app/themes/twentytwentyfive/assets/fonts/manrope/Manrope-VariableFont_wght.woff2 net::ERR_ABORTED 404 (Not Found)

How is it that the path to this asset is being duplicated: https://site2.local-wordpress.local/local-wordpress.local/app

My .htaccess file @ web/:

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
RewriteBase /
RewriteRule ^index\.php$ - [L]

# add a trailing slash to /wp-admin
RewriteRule ^wp-admin$ wp-admin/ [R=301,L]

RewriteCond %{REQUEST_FILENAME} -f [OR]
RewriteCond %{REQUEST_FILENAME} -d
RewriteRule ^ - [L]
RewriteRule ^(wp-(content|admin|includes).*) wp/$1 [L]
RewriteRule ^(.*\.php)$ wp/$1 [L]
RewriteRule . index.php [L]
</IfModule>

My .env @ /:

WP_ENV='local'
WP_HOME='local-wordpress.local'
WP_SITEURL="${WP_HOME}/wp"

I made an adjustment to my .env file to:

WP_ENV='local'
WP_HOME='https://local-wordpress.local'
WP_SITEURL="${WP_HOME}/wp"

This fixed the dup in the path BUT now I’m getting CORS errors:

Access to font at 'https://local-wordpress.local/app/themes/twentytwentyfive/assets/fonts/manrope/Manrope-VariableFont_wght.woff2' from origin 'https://site2.local-wordpress.local' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

What can i do to fix this issue?

Thank you