:80 { root * /srv file_server browse header Access-Control-Allow-Origin "{env.CORS_ALLOWED_HOSTS}" }