diff --git a/roles/bodhi2/base/templates/httpd.conf.j2 b/roles/bodhi2/base/templates/httpd.conf.j2
index 5bd0dff20c..da1624667f 100644
--- a/roles/bodhi2/base/templates/httpd.conf.j2
+++ b/roles/bodhi2/base/templates/httpd.conf.j2
@@ -48,6 +48,11 @@ MaxRequestWorkers 100
     ExpiresDefault "access plus 1 month"
     Header unset ETag
 </Location>
+{% if env == 'staging' %}
+<IfModule mod_headers.c>
+    Header set Access-Control-Allow-Origin "https://src.stg.fedoraproject.org"
+</IfModule>
+{% endif %}
 LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
 CustomLog /httpdir/accesslog combined
 ErrorLog /httpdir/errorlog