CORS errors with read-model

I am getting CORS errors with read-model running in local docker compose configuration. This can been solved using an nginx proxy, but I’m wondering if this is no a bit heavy handed. I thought I might be able to solve this more simply using the allowed issuers and the issuer override, but it doesn’t seem to work. The READ_MODEL_ALLOWED_ISSUERS is set to

      READ_MODEL_ALLOWED_ISSUERS: "http://keycloak:11000/realms/seed,http://$${AUTH_HOST:localhost}:11000/realms/seed"
      READ_MODEL_ISSUER_OVERRIDE: "http://keycloak:11000/realms/seed"

and the JWT contains

  "iss": "http://keycloak:11000/realms/seed",

So I would expect this should work?

So it is the lack of CORS headers. add_header 'Access-Control-Allow-Origin' '*' always; This is all fine for deployed systems, but the developer experience for local testing is not good. I should be able to use inspector without the need to add nginx proxies. AFAIK this can also be solved by setting the keycloak hostname?