diff --git a/configuration/server/cdn/cdn-lb.nix b/configuration/server/cdn/cdn-lb.nix
index f717ba6..d6f79da 100644
--- a/configuration/server/cdn/cdn-lb.nix
+++ b/configuration/server/cdn/cdn-lb.nix
@@ -8,7 +8,7 @@
     virtualHosts."${config.networking.hostName}.live.hacc.media" = {
       locations = {
         "/" = {
-          return = "301 \"http://$cdnhosts$request_uri\"";
+          return = "301 \"https://$cdnhosts$request_uri\"";
           extraConfig = ''
             auth_basic off;
           '';
diff --git a/configuration/server/cdn/cdn-master.nix b/configuration/server/cdn/cdn-master.nix
index 14e866c..dde85bf 100644
--- a/configuration/server/cdn/cdn-master.nix
+++ b/configuration/server/cdn/cdn-master.nix
@@ -10,14 +10,17 @@ in {
     virtualHosts."${config.networking.hostName}.live.hacc.media" = {
       locations = {
         "~* \\.(m3u8)$" = {
+
           proxyPass = "${host-server}$request_uri";
           extraConfig = ''
             #proxy_cache = off;
             expires 2s;
             auth_basic off;
+            add_header 'Access-Control-Allow-Origin' '*';
           '';
         };
         "/hls" = {
+
           proxyPass = "${host-server}$request_uri";
           extraConfig = ''
             types {
@@ -28,6 +31,7 @@ in {
             proxy_ignore_headers Cache-Control;
             proxy_cache_valid any 30m;
             auth_basic off;
+            add_header 'Access-Control-Allow-Origin' '*';
           '';
         };
       };