nginx direct video links help

slvrsteele said:

First of all get rid of http/https from Allow_Origin directive.
Do not forget to modify http_origin to match your site/sites. http_origin sites can be with or without www
Implement following code to your location mp4 block and adapt it (it is only a head start example on how it should look like)

Code:

    set $cors '';
    if ($http_origin ~ '^https?://(localhost|site\.com|www\.alt.web\.com|www.\.example\.net)') {
            set $cors 'true';
    }

    if ($cors = 'true') {
            add_header 'Access-Control-Allow-Origin' "$http_origin" always;
            add_header 'Access-Control-Allow-Credentials' 'true' always;
            add_header 'Access-Control-Allow-Methods' 'GET, POST, PUT, DELETE, OPTIONS' always;
            add_header 'Access-Control-Allow-Headers' 'Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With' always;
            # required to be able to read Authorization header in frontend
            #add_header 'Access-Control-Expose-Headers' 'Authorization' always;
    }

    if ($request_method = 'OPTIONS') {
            # Tell client that this pre-flight info is valid for 20 days
            add_header 'Access-Control-Max-Age' 1728000;
            add_header 'Content-Type' 'text/plain charset=UTF-8';
            add_header 'Content-Length' 0;
            return 204;
    }
# do not forget to add other methods GET PUT ...

Click to expand...

Bazooka said:

Easiest method, but less secure:

Code:

    location ~ \.mp4$ {
        valid_referers none blocked yourwebsite.com;
        if ($invalid_referer) {
            return    403;
        }

Try this and let me know if it worked.

Click to expand...