mergedrop: pin CORS_ORIGINS to app origin (was wildcard)

2026-08-21 10:11:24 -07:00
parent f37b2cb9e3
commit 08660426d7
2 changed files with 3 additions and 3 deletions
@@ -16,7 +16,7 @@
        { "key": "MERGEDROP_MAX_FILES", "value": "${MERGEDROP_MAX_FILES}" },
        { "key": "MERGEDROP_MAX_FILE_SIZE", "value": "${MERGEDROP_MAX_FILE_SIZE}" },
        { "key": "MERGEDROP_OUTPUT_MAX_AGE_HOURS", "value": "${MERGEDROP_OUTPUT_MAX_AGE_HOURS}" },
-        { "key": "CORS_ORIGINS", "value": "*" },
+        { "key": "CORS_ORIGINS", "value": "${APP_PROTOCOL}://${APP_DOMAIN}" },
        { "key": "MONGO_URL", "value": "mongodb://mergedrop-db:27017" },
        { "key": "DB_NAME", "value": "mergedrop" }
      ],