Turns out the CORS error was misleading. The connection was failing because I was using the wrong api key on the server side, and the browser was just interpreting it as a CORS error.
My issue is resolved, but I’m leaving this post up since the question regarding nginx customization is still valid