location /api { add_header Access-Control-Allow-Origin *; add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS'; add_header Access-Control-Allow-Headers 'DNT,Keep-Alive,User-Agent, Cache-Control,Content-Type,Authorization'; if ($request_method = 'OPTIONS') { return 204; } }