I think it should show up immediately. However, my guide currently only feature syntax's for Apache and Nginx.

To test CORS for the 'GET' method visit [test-cors.org](https://test-cors.org/#?client_method=GET&client_credentials=false&server_url=https%3A%2F%2Fklabo.blog%2F.well-known%2Fnostr.json&server_enable=true&server_status=200&server_credentials=false&server_tabs=remote)

You should see a 200 OK XHR status.

Compare it to the output from my domain [test-cors.org](https://test-cors.org/#?client_method=GET&client_credentials=false&server_url=https%3A%2F%2Forangepill.dev%2F.well-known%2Fnostr.json&server_enable=true&server_status=200&server_credentials=false&server_tabs=remote)

Reply to this note

Please Login to reply.

Discussion

You may have to do something similar, but later tweak it to only allow it in the ./well-known path :

https://caddy.community/t/implementing-cors-whitelist-in-caddy-v2/8590/2