diff --git a/roles/bodhi2/base/templates/bodhi-app.conf b/roles/bodhi2/base/templates/bodhi-app.conf
index 06ba8fb862..f2e534f161 100644
--- a/roles/bodhi2/base/templates/bodhi-app.conf
+++ b/roles/bodhi2/base/templates/bodhi-app.conf
@@ -2,7 +2,7 @@ Alias /static /usr/lib/python2.7/site-packages/bodhi/static/
 
 <Directory /usr/lib/python2.7/site-packages/bodhi/static>
     # modern browsers require that fonts have this
-    Header set Access-Control-Allow-Origin "*.fedoraproject.org"
+    Header set Access-Control-Allow-Origin "https://*.fedoraproject.org"
 </Directory>
 
 WSGIDaemonProcess bodhi user=bodhi group=bodhi display-name=bodhi processes={{wsgi_procs}} threads={{wsgi_threads}}