server { listen 443 ssl; server_name api.vlw.se; include snippets/vlw.se-ssl; location / { add_header 'Access-Control-Allow-Origin' $http_origin; add_header 'Access-Control-Allow-Credentials' 'true'; add_header 'Access-Control-Allow-Methods' 'GET, POST, PATCH, PUT, OPTIONS'; add_header 'Access-Control-Allow-Headers' 'Authorization, Origin, Content-Type, Accept'; proxy_pass http://localhost:8001; } }