diff --git a/reverse-proxy/location-includes/headers.conf b/reverse-proxy/location-includes/headers.conf index 151f7de3c..758a5d76f 100644 --- a/reverse-proxy/location-includes/headers.conf +++ b/reverse-proxy/location-includes/headers.conf @@ -4,3 +4,9 @@ add_header X-Frame-Options "SAMEORIGIN" always; add_header X-XSS-Protection "1; mode=block" always; add_header Permissions-Policy "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()" always; add_header Referrer-Policy "no-referrer-when-downgrade" always; + +# https://enable-cors.org/server_nginx.html +add_header Access-Control-Allow-Origin '*' always; +add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS' always; +add_header Access-Control-Allow-Headers 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range' always; +add_header Access-Control-Expose-Headers 'Content-Length,Content-Range' always; \ No newline at end of file