diff --git a/manifests/logserver.pp b/manifests/logserver.pp
index e6367c1..3801ad1 100644
--- a/manifests/logserver.pp
+++ b/manifests/logserver.pp
@@ -45,6 +45,12 @@ class openstackci::logserver (
   include ::httpd
   include ::httpd::mod::wsgi
 
+  if ! defined(Httpd::Mod['headers']) {
+    httpd::mod { 'headers':
+      ensure => present,
+    }
+  }
+
   if ! defined(Httpd::Mod['rewrite']) {
     httpd::mod { 'rewrite':
       ensure => present,
diff --git a/templates/logs.vhost.erb b/templates/logs.vhost.erb
index afd3ae2..e51b275 100644
--- a/templates/logs.vhost.erb
+++ b/templates/logs.vhost.erb
@@ -13,6 +13,9 @@ NameVirtualHost <%= @vhost_name %>:<%= @port %>
 <% end -%>
   DocumentRoot <%= @docroot %>
 
+  # Authorize cross request, e.g. fetch job-output from the zuul builds page
+  Header set Access-Control-Allow-Origin "*"
+
   WSGIDaemonProcess logs user=www-data group=www-data processes=<%= scope.lookupvar('::openstackci::logserver::wsgi_processes') %> threads=<%= scope.lookupvar('::openstackci::logserver::wsgi_threads') %>
   WSGIProcessGroup logs
   WSGIApplicationGroup %{GLOBAL}