'Access-Control-Allow-Origin' header contains multiple values '*, *', but only one is allowed

I am using django-cors-headers and I have deployed my application on server, but still I am getting this issue. My current setting for CORS are

INSTALLED_APPS = ['corsheaders']

MIDDLEWARE_CLASSES = ['corsheaders.middleware.CorsMiddleware', 'corsheaders.middleware.CorsPostCsrfMiddleware']

CORS_ORIGIN_ALLOW_ALL = True

CORS_REPLACE_HTTPS_REFERER = True


CORS_ALLOW_HEADERS = (
        'x-requested-with',
        'content-type',
        'accept',
        'origin',
        'authorization',
        'x-csrftoken',
        'accept-encoding'
    )

CORS_ALLOW_METHODS = (
        'GET',
        'POST',
        'PUT',
        'PATCH',
        'DELETE',
        'OPTIONS'
    )

is there anyone who has resolved the following issue

[ambientsound]

Removing add_header Access-Control-Allow-Origin *; from my nginx configuration solved this problem.

[agriffis]

This happens when there are multiple layers in the server stack setting CORS headers. You just need to decide if you’re going to set the headers with django-cors-headers or using another layer (such as nginx), not both.