/.well-known/*
  Access-Control-Allow-Origin: *