nginx: add CORS for /storage (#19)

jokester · web-flow · commit 75fbacdd8a8e · 2025-10-02T14:57:57.000Z
diff --git a/nginx/templates/default.conf.template b/nginx/templates/default.conf.template
@@ -31,6 +31,14 @@ server {
         if ($request_filename ~* ^.*?\.(txt|zip)$){
             add_header Content-Disposition "attachment;";
         }
+
+        # Uncomment the following lines to allow CORS
+        # add_header 'Access-Control-Allow-Origin' '*';
+        # add_header 'Access-Control-Allow-Credentials' 'true';
+        # add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
+        # add_header 'Access-Control-Allow-Headers' 'DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';
+        # add_header 'Access-Control-Max-Age' 3600;
+
         alias /storage;
     }
 

Original file line number	Diff line number	Diff line change
`@@ -31,6 +31,14 @@ server {`
`31`	`31`	`if ($request_filename ~* ^.*?\.(txt\|zip)$){`
`32`	`32`	`add_header Content-Disposition "attachment;";`
`33`	`33`	`}`
	`34`	`+`
	`35`	`+ # Uncomment the following lines to allow CORS`
	`36`	`+ # add_header 'Access-Control-Allow-Origin' '*';`
	`37`	`+ # add_header 'Access-Control-Allow-Credentials' 'true';`
	`38`	`+ # add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';`
	`39`	`+ # add_header 'Access-Control-Allow-Headers' 'DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';`
	`40`	`+ # add_header 'Access-Control-Max-Age' 3600;`
	`41`	`+`
`34`	`42`	`alias /storage;`
`35`	`43`	`}`
`36`	`44`