fix: render valid CORS Nginx directives

2026-09-04 23:02:47 +02:00
parent 8413e5c340
commit 41a0791901
3 changed files with 7 additions and 4 deletions
@@ -56,8 +56,9 @@ final readonly class NginxConfiguration
            # The allowlist is emitted as exact Origin matches. Nginx omits an
            # add_header with an empty value, so missing/disallowed Origins do not
            # receive Access-Control-Allow-Origin. This applies after X-Accel.
-{$corsOriginRules}            add_header Access-Control-Allow-Origin $ondemand_hls_cors_origin always;
-            add_header Vary $ondemand_hls_cors_vary always;
+        {$corsOriginRules}
+            add_header Access-Control-Allow-Origin \$ondemand_hls_cors_origin always;
+            add_header Vary \$ondemand_hls_cors_vary always;
            add_header Cache-Control "private, no-store, max-age=0" always;
            add_header X-Content-Type-Options "nosniff" always;
            alias {$assetDirectory};