Don't forget about the CORS headers, otherwise web clients can't verify.
Very important point, thanks for pointing it out. In my case I am serving nostr.json file via nginx ingress controller in a kubernetes cluster and the file is stored in S3 Minio