add_header Access-Control-Allow-Origin *;
add_header Access-Control-Allow-Methods "GET, HEAD";