this is also a standard approach for nginx:

    location / {
      if ($http_origin ~ "^https?://(www\.)?doma.in$") {
        add_http_header Access-Control-Allow-Origin "$http_origin";
     } 
   }