This is the block I've included in my sites-enabled settings to take care of that:
location ~* \.(eot|ttf|woff|woff2)$ {
add_header Access-Control-Allow-Origin *;
}
Source: How do I add access control allow origin in nginx
location ~* \.(eot|ttf|woff|woff2)$ {
add_header Access-Control-Allow-Origin *;
}
Source: How do I add access control allow origin in nginx
location / {try_files $uri $uri/ /index.php?q=$uri&$args;}