From 1063980b4313989690d3bb1dcbb12172b212b4af Mon Sep 17 00:00:00 2001
From: Mike Cao <mike@umami.is>
Date: Tue, 12 May 2026 23:35:49 -0700
Subject: [PATCH] Reverted headers.

---
 next.config.ts | 10 +---------
 1 file changed, 1 insertion(+), 9 deletions(-)

diff --git a/next.config.ts b/next.config.ts
index 5498ad8da..c9c717f94 100644
--- a/next.config.ts
+++ b/next.config.ts
@@ -40,8 +40,6 @@ function normalizePath(url: string) {
 }
 
 const apiUrlOrigin = getUrlOrigin(apiUrl);
-const isAbsoluteApiUrl = Boolean(apiUrlOrigin);
-const allowOrigin = isAbsoluteApiUrl && cloudUrl ? cloudUrl : '*';
 const connectSrc = ["'self'", 'https:', apiUrlOrigin].filter(Boolean).join(' ');
 
 const contentSecurityPolicy = `
@@ -86,14 +84,8 @@ const trackerHeaders = [
 const apiHeaders = [
   {
     key: 'Access-Control-Allow-Origin',
-    value: allowOrigin,
+    value: '*',
   },
-  ...(allowOrigin !== '*'
-    ? [
-        { key: 'Access-Control-Allow-Credentials', value: 'true' },
-        { key: 'Vary', value: 'Origin' },
-      ]
-    : []),
   {
     key: 'Access-Control-Allow-Headers',
     value: '*',