diff --git a/recipes/web.rb b/recipes/web.rb
index a3d9dead..dcf2226f 100644
--- a/recipes/web.rb
+++ b/recipes/web.rb
@@ -18,6 +18,7 @@
 #
 
 include_recipe "apache2::mod_python"
+include_recipe "apache2::mod_headers"
 
 basedir = node['graphite']['base_dir']
 docroot = node['graphite']['doc_root']
diff --git a/templates/default/graphite-vhost.conf.erb b/templates/default/graphite-vhost.conf.erb
index 1502729c..d60ae62a 100644
--- a/templates/default/graphite-vhost.conf.erb
+++ b/templates/default/graphite-vhost.conf.erb
@@ -13,6 +13,10 @@ NameVirtualHost *:<%= node['graphite']['listen_port'] %>
         ErrorLog <%= node['graphite']['storage_dir'] %>/log/webapp/error.log
         CustomLog <%= node['graphite']['storage_dir'] %>/log/webapp/access.log common
 
+        Header set Access-Control-Allow-Origin "*"
+        Header set Access-Control-Allow-Methods "GET, OPTIONS"
+        Header set Access-Control-Allow-Headers "origin, authorization, accept"
+
         <Location "/">
                 SetHandler python-program
                 PythonPath "['<%= node['graphite']['doc_root'] %>'] + sys.path"