I initially used a static file, but wanted to add the function for people to also use my server for access to my private relay. So you can only post to my relay if you’re also nip05 to our domain.
But we do have the following in our nginx settings, but you’re right, there is a Cors issue still
add_header Access-Control-Allow-Origin "$http_origin";
add_header Access-Control-Allow-Origin "*";
add_header 'Access-Control-Allow-Credentials' 'true';
add_header 'Access-Control-Allow-Headers' 'Authorization,Accept,Origin,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range';
add_header 'Access-Control-Allow-Methods' 'GET';