Header set Access-Control-Allow-Origin "http://pkgsubmit.<%= domain %>"             # default
Header set Access-Control-Allow-Origin "https://pkgsubmit.<%= domain %>" env=HTTPS  # override