diff --git a/README.md b/README.md
index e6dba12..e9ddda8 100644
--- a/README.md
+++ b/README.md
@@ -254,10 +254,11 @@ server {
     }
     
     location / {
-        add_header Access-Control-Allow-Origin $xssorigin;
         proxy_http_version 1.1;
         proxy_set_header Connection "";
         proxy_pass http://127.0.0.1:8080;
+        proxy_hide_header Access-Control-Allow-Origin;
+        add_header Access-Control-Allow-Origin $xssorigin;
     }
 }
 ```
@@ -266,9 +267,9 @@ One further change you might want to make to the file above is the `add_header A
 my own Spothole server to make sure that other third-party web-based software can get the data from my instance, and applies to any endpoint underneath `/api`. If you want
 *your* Spothole instance to be set up the same way, so that others can write software in JavaScript that can access it,
 leave this intact. But if you want your Spothole instance to only be usable by scripts running on the web server you write,
-you can remove this block. (Note that this doesn't stop other people writing *non-web-based* software that accesses your
+you can remove this line. (Note that this doesn't stop other people writing *non-web-based* software that accesses your
 Spothole API—the enforcement of cross-origin headers only happens within the user's browser. If you need to lock your
-instance down so that no-one else can access it with *any* software, that's an aspect of nginx config that you will need
+instance down so that no-one else can access it with *any* software, that's an aspect of nginx or firewall config that you will need
 to find help with elsewhere.)
 
 Now, make a symbolic link to enable the site:
diff --git a/templates/about.html b/templates/about.html
index cab4e61..5f4c03c 100644
--- a/templates/about.html
+++ b/templates/about.html
@@ -66,7 +66,7 @@
     <p>This software is dedicated to the memory of Tom G1PJB, SK, a friend and colleague who sadly passed away around the time I started writing it in Autumn 2025. I was looking forward to showing it to you when it was done.</p>
 </div>
 
-<script src="/js/common.js?v=1772224426"></script>
+<script src="/js/common.js?v=1772357021"></script>
 <script>$(document).ready(function() { $("#nav-link-about").addClass("active"); }); <!-- highlight active page in nav --></script>
 
 {% end %}
\ No newline at end of file
diff --git a/templates/add_spot.html b/templates/add_spot.html
index 404e681..4cb0b1d 100644
--- a/templates/add_spot.html
+++ b/templates/add_spot.html
@@ -69,8 +69,8 @@
 
 </div>
 
-<script src="/js/common.js?v=1772224426"></script>
-<script src="/js/add-spot.js?v=1772224426"></script>
+<script src="/js/common.js?v=1772357021"></script>
+<script src="/js/add-spot.js?v=1772357021"></script>
 <script>$(document).ready(function() { $("#nav-link-add-spot").addClass("active"); }); <!-- highlight active page in nav --></script>
 
 {% end %}
\ No newline at end of file
diff --git a/templates/alerts.html b/templates/alerts.html
index 7f3d25c..6dc7456 100644
--- a/templates/alerts.html
+++ b/templates/alerts.html
@@ -56,8 +56,8 @@
 
 </div>
 
-<script src="/js/common.js?v=1772224426"></script>
-<script src="/js/alerts.js?v=1772224426"></script>
+<script src="/js/common.js?v=1772357021"></script>
+<script src="/js/alerts.js?v=1772357021"></script>
 <script>$(document).ready(function() { $("#nav-link-alerts").addClass("active"); }); <!-- highlight active page in nav --></script>
 
 {% end %}
\ No newline at end of file
diff --git a/templates/bands.html b/templates/bands.html
index c06443c..29b2fac 100644
--- a/templates/bands.html
+++ b/templates/bands.html
@@ -62,9 +62,9 @@
 <script>
     let spotProvidersEnabledByDefault = {% raw json_encode(web_ui_options["spot-providers-enabled-by-default"]) %};
 </script>
-<script src="/js/common.js?v=1772224426"></script>
-<script src="/js/spotsbandsandmap.js?v=1772224426"></script>
-<script src="/js/bands.js?v=1772224426"></script>
+<script src="/js/common.js?v=1772357021"></script>
+<script src="/js/spotsbandsandmap.js?v=1772357021"></script>
+<script src="/js/bands.js?v=1772357021"></script>
 <script>$(document).ready(function() { $("#nav-link-bands").addClass("active"); }); <!-- highlight active page in nav --></script>
 
 {% end %}
\ No newline at end of file
diff --git a/templates/base.html b/templates/base.html
index 60da102..defb242 100644
--- a/templates/base.html
+++ b/templates/base.html
@@ -46,10 +46,10 @@
             crossorigin="anonymous"></script>
     <script src="https://cdn.jsdelivr.net/npm/tinycolor2@1.6.0/cjs/tinycolor.min.js"></script>
 
-    <script src="https://misc.ianrenton.com/jsutils/utils.js?v=1772224426"></script>
-    <script src="https://misc.ianrenton.com/jsutils/storage.js?v=1772224426"></script>
-    <script src="https://misc.ianrenton.com/jsutils/ui-ham.js?v=1772224426"></script>
-    <script src="https://misc.ianrenton.com/jsutils/geo.js?v=1772224426"></script>
+    <script src="https://misc.ianrenton.com/jsutils/utils.js?v=1772357021"></script>
+    <script src="https://misc.ianrenton.com/jsutils/storage.js?v=1772357021"></script>
+    <script src="https://misc.ianrenton.com/jsutils/ui-ham.js?v=1772357021"></script>
+    <script src="https://misc.ianrenton.com/jsutils/geo.js?v=1772357021"></script>
 
 </head>
 <body>
diff --git a/templates/map.html b/templates/map.html
index a855055..57cfd6f 100644
--- a/templates/map.html
+++ b/templates/map.html
@@ -70,9 +70,9 @@
 <script>
     let spotProvidersEnabledByDefault = {% raw json_encode(web_ui_options["spot-providers-enabled-by-default"]) %};
 </script>
-<script src="/js/common.js?v=1772224426"></script>
-<script src="/js/spotsbandsandmap.js?v=1772224426"></script>
-<script src="/js/map.js?v=1772224426"></script>
+<script src="/js/common.js?v=1772357021"></script>
+<script src="/js/spotsbandsandmap.js?v=1772357021"></script>
+<script src="/js/map.js?v=1772357021"></script>
 <script>$(document).ready(function() { $("#nav-link-map").addClass("active"); }); <!-- highlight active page in nav --></script>
 
 {% end %}
\ No newline at end of file
diff --git a/templates/spots.html b/templates/spots.html
index ad75b5e..8d9cfeb 100644
--- a/templates/spots.html
+++ b/templates/spots.html
@@ -87,9 +87,9 @@
 <script>
     let spotProvidersEnabledByDefault = {% raw json_encode(web_ui_options["spot-providers-enabled-by-default"]) %};
 </script>
-<script src="/js/common.js?v=1772224426"></script>
-<script src="/js/spotsbandsandmap.js?v=1772224426"></script>
-<script src="/js/spots.js?v=1772224426"></script>
+<script src="/js/common.js?v=1772357021"></script>
+<script src="/js/spotsbandsandmap.js?v=1772357021"></script>
+<script src="/js/spots.js?v=1772357021"></script>
 <script>$(document).ready(function() { $("#nav-link-spots").addClass("active"); }); <!-- highlight active page in nav --></script>
 
 {% end %}
\ No newline at end of file
diff --git a/templates/status.html b/templates/status.html
index ab5e176..f3f48ff 100644
--- a/templates/status.html
+++ b/templates/status.html
@@ -3,8 +3,8 @@
 
 <div id="status-container" class="row row-cols-1 row-cols-md-4 g-4 mt-4"></div>
 
-<script src="/js/common.js?v=1772224426"></script>
-<script src="/js/status.js?v=1772224426"></script>
+<script src="/js/common.js?v=1772357021"></script>
+<script src="/js/status.js?v=1772357021"></script>
 <script>$(document).ready(function() { $("#nav-link-status").addClass("active"); }); <!-- highlight active page in nav --></script>
 
 {% end %}
\ No newline at end of file