DDEV

Note

Only needed for multisite DDEV setups where each Craft site has its own subdomain. Single-site installs work without any configuration.

The plugin ships .ddev/nginx/video-scribe-coop.conf, a snippet DDEV includes inside the nginx server {} block. It adds COEP: credentialless to all responses. COOP is set by the plugin’s PHP code, not here.

After installing the plugin, restart DDEV:

ddev restart

Verify

# CP — both headers
curl -sI https://yoursite.ddev.site/admin | grep -i cross-origin
# cross-origin-embedder-policy: credentialless
# cross-origin-opener-policy: same-origin

# Front-end — COEP only, no COOP
curl -sI https://yoursite.ddev.site/ | grep -i cross-origin
# cross-origin-embedder-policy: credentialless

What’s in the config file

.ddev/nginx/video-scribe-coop.conf is one line:

add_header Cross-Origin-Embedder-Policy "credentialless" always;

COOP: same-origin is intentionally absent. The plugin’s PHP sets it on CP responses only. Adding it at the nginx level would apply it to the front-end and break Live Preview in multisite setups.