From 058b1761b7cf3a5352e5a44736ebc70c886dbfdd Mon Sep 17 00:00:00 2001
From: Matthew Hodgson <matthew@matrix.org>
Date: Wed, 6 Nov 2024 12:02:09 +0000
Subject: [PATCH] =?UTF-8?q?add=20some=20a=C3=A7ao?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 data-template/nginx/conf.d/app.conf | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/data-template/nginx/conf.d/app.conf b/data-template/nginx/conf.d/app.conf
index 6f8b361..af35fbf 100644
--- a/data-template/nginx/conf.d/app.conf
+++ b/data-template/nginx/conf.d/app.conf
@@ -16,10 +16,12 @@ server {
 
     # location /.well-known/acme-challenge/ {
     #    root /var/www/certbot;
+    #    add_header Access-Control-Allow-Origin *;
     # }
 
     location /.well-known/matrix/ {
         root /var/www;
+        add_header Access-Control-Allow-Origin *;
     }
 
     # XXX: is this right? or should auth.$DOMAIN be the issuer?
@@ -27,6 +29,7 @@ server {
         proxy_pass http://mas:8080;
         proxy_http_version 1.1;
         proxy_set_header X-Forwarded-For ${DOLLAR}remote_addr;
+        add_header Access-Control-Allow-Origin *;
     }
 
     location / {
@@ -42,6 +45,7 @@ server {
 
     location /.well-known/matrix/ {
         root /var/www;
+        add_header Access-Control-Allow-Origin *;
     }
 
     # XXX: is this right? or should auth.$DOMAIN be the issuer?
@@ -49,6 +53,7 @@ server {
         proxy_pass http://mas:8080;
         proxy_http_version 1.1;
         proxy_set_header X-Forwarded-For ${DOLLAR}remote_addr;
+        add_header Access-Control-Allow-Origin *;
     }
 }
 
@@ -171,8 +176,6 @@ server {
         client_max_body_size 50M;
     }
 
-    location /.well-known {}
-
     # Synapse responses may be chunked, which is an HTTP/1.1 feature.
     proxy_http_version 1.1;
 }