I have problem with my nginx configuration. I want to add Access-Control-Allow-Origin header in nginx config, for one domain but for both http and https

I tried this configuration, but it doesn't work:

add_header 'Access-Control-Allow-Origin' "https://example.com http://example.com" always;

I get error response from browser:

The 'Access-Control-Allow-Origin' header contains multiple values 'https://example.com http://example.com', but only one is allowed. Have the server send the header with a valid value ?

1 Answer 1


Use nginx's $scheme variable


request scheme, “http” or “https”

add_header 'Access-Control-Allow-Origin' "${scheme}://example.com" always;

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .