@parker @SpaceElf @parker @graf I think for our installations, we can simply drop the access-control-allow-origins and access-control-allow-credentials headers?
I’ve added
proxy_hide_header 'access-control-allow-credentials'; proxy_hide_header 'access-control-allow-origin';
to the location block for /media. I think that’ll work just fine?