diff --git a/server/src/Api/Program.fs b/server/src/Api/Program.fs
index 9cb33c0..5276aa4 100644
--- a/server/src/Api/Program.fs
+++ b/server/src/Api/Program.fs
@@ -114,7 +114,15 @@ let main _ =
                 fun builder ->
                     builder.AllowAnyHeader() |> ignore
                     builder.AllowAnyMethod() |> ignore
-                    builder.AllowAnyOrigin() |> ignore
+
+                    builder.WithOrigins(
+                        [|
+                            env.client_url
+                            "http://localhost"
+                            "https://duck-stream.vercel.app"
+                        |]
+                    )
+                    |> ignore
             ))
 
         endpoints [