diff --git a/docker/secure_origin.conf b/docker/secure_origin.conf
index 52ce37b6..cd6a15b9 100644
--- a/docker/secure_origin.conf
+++ b/docker/secure_origin.conf
@@ -1,2 +1,3 @@
 add_header Cross-Origin-Embedder-Policy require-corp;
-add_header Cross-Origin-Opener-Policy same-origin;
\ No newline at end of file
+add_header Cross-Origin-Opener-Policy same-origin;
+add_header Access-Control-Allow-Origin: https://pwa.kiwix.org;
\ No newline at end of file