mirror,spindle-hel: allow cors #39

Merged ptr.pet
targeting master from dwn/nginx
Merged opened by and assigned to ptr.pet
targeting master from dwn/nginx
Commits 2

mirror,spindle-hel: allow cors
common: add shared nginx defaults and per-location allowCors