diff --git a/roles/bodhi2/base/templates/bodhi-app.conf b/roles/bodhi2/base/templates/bodhi-app.conf
index b266ef5566..06ba8fb862 100644
--- a/roles/bodhi2/base/templates/bodhi-app.conf
+++ b/roles/bodhi2/base/templates/bodhi-app.conf
@@ -1,5 +1,10 @@
 Alias /static /usr/lib/python2.7/site-packages/bodhi/static/
 
+<Directory /usr/lib/python2.7/site-packages/bodhi/static>
+    # modern browsers require that fonts have this
+    Header set Access-Control-Allow-Origin "*.fedoraproject.org"
+</Directory>
+
 WSGIDaemonProcess bodhi user=bodhi group=bodhi display-name=bodhi processes={{wsgi_procs}} threads={{wsgi_threads}}
 WSGISocketPrefix run/wsgi
 WSGIRestrictStdout On