diff --git a/volumes/conf.d/zinomedia.de.conf b/volumes/conf.d/zinomedia.de.conf
index f9dbd9e..aff6164 100644
--- a/volumes/conf.d/zinomedia.de.conf
+++ b/volumes/conf.d/zinomedia.de.conf
@@ -1,3 +1,9 @@
+map $http_origin $allow_origin {
+    ~^https://(.*\.)?zinomedia\.de$ $http_origin;
+    default "";
+}
+
+
 server {
     listen 443 ssl;
     listen [::]:443 ssl;
@@ -22,7 +28,7 @@ server {
     client_max_body_size 0;
 
     # Wordpress migration support
-    add_header 'Access-Control-Allow-Origin' 'https://zinomedia.de' always;
+    add_header 'Access-Control-Allow-Origin' $allow_origin;
 
     location / {
         resolver 127.0.0.11;