/.well-known/*
  Access-Control-Allow-Origin: *
/img/avatars/*
  Access-Control-Allow-Origin: *