diff --git a/conf/config.json b/conf/config.json
index bfb1208..d74263c 100644
--- a/conf/config.json
+++ b/conf/config.json
@@ -43,7 +43,7 @@
     "EnableMultifactorAuthentication": false,
     "EnforceMultifactorAuthentication": false,
     "EnableUserAccessTokens": false,
-    "AllowCorsFrom": "",
+    "AllowCorsFrom": "__DOMAIN__",
     "CorsExposedHeaders": "",
     "CorsAllowCredentials": false,
     "CorsDebug": false,
diff --git a/conf/nginx.conf b/conf/nginx.conf
index bbba431..6b7e46d 100644
--- a/conf/nginx.conf
+++ b/conf/nginx.conf
@@ -21,9 +21,14 @@ location ~ ^__PATH__/api/v[0-9]+/(users/)?websocket$ {
     proxy_pass http://127.0.0.1:__PORT__;
 }
 
-location __PATH__/ {
-    client_max_body_size 100M;
+location ~* ^__PATH__/ {
+    client_max_body_size 250M;
     proxy_set_header Connection "";
+
+    if ($request_method = HEAD) {
+        return 200;
+    }
+
     proxy_set_header Host $host;
     proxy_set_header X-Real-IP $remote_addr;
     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;