location / {
    add_header Access-Control-Allow-Origin *;
     add_header Access-Control-Allow-Headers "Origin, X-Requested-With, Content-Type, Accept";
      add_header Access-Control-Allow-Methods "GET, POST, OPTIONS";
    }

http://nginx.org/en/docs/http/ngx_http_headers_module.html