NGINX needs CORS options in location definition