diff --git a/templates/nginx-cors.conf.j2 b/templates/nginx-cors.conf.j2
index cd96e1c..aac2ca8 100644
--- a/templates/nginx-cors.conf.j2
+++ b/templates/nginx-cors.conf.j2
@@ -58,7 +58,9 @@ add_header 'Access-Control-Allow-Origin' '{{ nginx_access_control_allow_origin_s
 if ($request_method = OPTIONS ) {
     return 204;
 }
+{% if nginx_cors_limit_origin %}
 add_header 'Access-Control-Allow-Credentials' 'true';
+{% endif %}
 add_header 'Access-Control-Allow-Methods' '{{ nginx_cors_allowed_methods }}';
 add_header 'Access-Control-Allow-Headers' '{{ nginx_cors_allowed_headers }}';
 add_header 'Access-Control-Expose-Headers' '{{ nginx_cors_allowed_headers }}';