m

volumes/conf.d/zinomedia.de.conf

@@ -1,3 +1,9 @@
+map $http_origin $allow_origin {
+    ~^https://(.*\.)?zinomedia\.de$ $http_origin;
+    default "";
+}
+
+
 server {
     listen 443 ssl;
     listen [::]:443 ssl;
@@ -22,7 +28,7 @@ server {
     client_max_body_size 0;
 
     # Wordpress migration support
-    add_header 'Access-Control-Allow-Origin' 'https://zinomedia.de' always;
+    add_header 'Access-Control-Allow-Origin' $allow_origin;
 
     location / {
         resolver 127.0.0.11;