chore: add variables to configure cors headers

Signed-off-by: Felipe Zipitria <[email protected]>

nginx/Dockerfile

@@ -114,6 +114,11 @@ LABEL maintainer="Felipe Zipitria <[email protected]>"
 ENV \
     ACCESSLOG=/var/log/nginx/access.log \
     BACKEND=http://localhost:80 \
+    CORS_HEADER_403_ALLOW_ORIGIN="*" \
+    CORS_HEADER_403_ALLOW_METHODS="GET, POST, PUT, DELETE, OPTIONS" \
+    CORS_HEADER_403_CONTENT_TYPE="text/plain" \
+    CORS_HEADER_403_MAX_AGE=3600 \
+    CORS_HEADER_ACCESS_CONTROL_ALLOW_HEADERS="*" \
     DNS_SERVER= \
     ERRORLOG=/var/log/nginx/error.log \
     KEEPALIVE_TIMEOUT=60s \

nginx/Dockerfile-alpine

@@ -107,6 +107,11 @@ LABEL maintainer="Felipe Zipitria <[email protected]>"
 ENV \
     ACCESSLOG=/var/log/nginx/access.log \
     BACKEND=http://localhost:80 \
+    CORS_HEADER_403_ALLOW_ORIGIN="*" \
+    CORS_HEADER_403_ALLOW_METHODS="GET, POST, PUT, DELETE, OPTIONS" \
+    CORS_HEADER_403_CONTENT_TYPE="text/plain" \
+    CORS_HEADER_403_MAX_AGE=3600 \
+    CORS_HEADER_ACCESS_CONTROL_ALLOW_HEADERS="*" \
     DNS_SERVER= \
     ERRORLOG=/var/log/nginx/error.log \
     KEEPALIVE_TIMEOUT=60s \

nginx/templates/includes/cors.conf.template

@@ -0,0 +1,5 @@
+more_set_headers -s 403 'Content-Type' '${CORS_CONTENT_TYPE}';
+more_set_headers -s 403 'Access-Control-Allow-Origin' '*';
+more_set_headers -s 403 'Access-Control-Max-Age' '3600';
+more_set_headers -s 403 'Access-Control-Allow-Methods' 'GET, POST, PUT, DELETE, OPTIONS';
+more_set_headers 'Access-Control-Allow-Headers' '*';

nginx/templates/nginx.conf.template

@@ -1,4 +1,5 @@
 load_module modules/ngx_http_modsecurity_module.so;
+# allows to add cors headers when replying with 403
 load_module modules/ngx_http_headers_more_filter_module.so;
 
 worker_processes auto;