this is also a standard approach for nginx: location / { if ($http_origin ~ "^https?://(www\.)?doma.in$") { add_http_header Access-Control-Al

this is also a standard approach for nginx: location / { if ($http_origin ~ "^https?://(www\.)?doma.in$") { add_http_header Access-Control-Allow-Origin "$http_origin"; } }