NOSTR

NIP-05

If you want to soft-verify the name you use on your account and it doesn’t work by placing .well-known/nostr.json in your website root, you may need to add the following to your .htaccess file (also in the site root):

<IfModule mod_headers.c>
  <FilesMatch "\.json$">
    Header set Access-Control-Allow-Origin "*"
    Header set Access-Control-Allow-Methods "GET, OPTIONS"
    Header set Access-Control-Allow-Headers "Content-Type"
  </FilesMatch>
</IfModule>

So my full .htaccess file now looks like:

# ── Enable CORS on .json endpoints ─────────────────────
<IfModule mod_headers.c>
  <FilesMatch "\.json$">
    Header set Access-Control-Allow-Origin "*"
    Header set Access-Control-Allow-Methods "GET, OPTIONS"
    Header set Access-Control-Allow-Headers "Content-Type"
  </FilesMatch>
</IfModule>
# ───────────────────────────────────────────────────────

# Your existing rules
RewriteOptions inherit

RewriteEngine on
RewriteCond %{HTTP_HOST} ^tomdwyer\.co\.uk$ [OR]
RewriteCond %{HTTP_HOST} ^www\.tomdwyer\.co\.uk$
RewriteRule ^/?$ "https\:\/\/tomdwyer\.uk\/" [R=301,L]