diff --git a/data-template/nginx/conf.d/app.conf b/data-template/nginx/conf.d/app.conf
index af35fbf..82580b8 100644
--- a/data-template/nginx/conf.d/app.conf
+++ b/data-template/nginx/conf.d/app.conf
@@ -21,7 +21,7 @@ server {
 
     location /.well-known/matrix/ {
         root /var/www;
-        add_header Access-Control-Allow-Origin *;
+	#add_header Access-Control-Allow-Origin *;
     }
 
     # XXX: is this right? or should auth.$DOMAIN be the issuer?
@@ -29,7 +29,7 @@ server {
         proxy_pass http://mas:8080;
         proxy_http_version 1.1;
         proxy_set_header X-Forwarded-For ${DOLLAR}remote_addr;
-        add_header Access-Control-Allow-Origin *;
+	#add_header Access-Control-Allow-Origin *;
     }
 
     location / {
@@ -45,7 +45,7 @@ server {
 
     location /.well-known/matrix/ {
         root /var/www;
-        add_header Access-Control-Allow-Origin *;
+	#add_header Access-Control-Allow-Origin *;
     }
 
     # XXX: is this right? or should auth.$DOMAIN be the issuer?
@@ -53,7 +53,7 @@ server {
         proxy_pass http://mas:8080;
         proxy_http_version 1.1;
         proxy_set_header X-Forwarded-For ${DOLLAR}remote_addr;
-        add_header Access-Control-Allow-Origin *;
+	#add_header Access-Control-Allow-Origin *;
     }
 }