ugh, where's my mistake... hmmm

https://www.test-cors.org/

https://anonymous.buzz/.well-known/nostr.json?name=Anonymous

wonder if the rewrite module is causing it.... gotta be close