Caddy v2.1+ CORS whitelist

Caddyfile

(cors) {
        @cors_preflight{args.0} {
                method OPTIONS
                header Origin {args.0}
        }

        handle @cors_preflight{args.0} {
                header {
                        Access-Control-Allow-Origin "{args.0}"
                        Access-Control-Allow-Methods "GET, POST, PUT, PATCH, DELETE, OPTIONS"
                        Access-Control-Allow-Headers *
                        Access-Control-Max-Age "3600"
                        defer
                }
                respond "" 204
        }

        handle @cors{args.0} {
                header {
                        Access-Control-Allow-Origin "{args.0}"
                        Access-Control-Expose-Headers *
                        defer
                }
        }
}
myawesomewebsite.com {
	root * /srv/public/
	file_server
	import cors https://member.myawesomewebsite.com
	import cors https://customer.myawesomewebsite.com
}

@DurandA Thanks, updated.

@coolaj86 It could be a good time to review and update https://webinstall.dev/caddy if you are still including this.