Require all denied Require all granted Header set Access-Control-Allow-Origin 'https://tobias-radloff.de' Header set Access-Control-Allow-Origin 'https://www.tobias-radloff.de'