diff --git a/server/src/Api/Program.fs b/server/src/Api/Program.fs
index 99c8f8f..89dde72 100644
--- a/server/src/Api/Program.fs
+++ b/server/src/Api/Program.fs
@@ -113,16 +113,18 @@ let main _ =
             options.AddPolicy(
                 "CorsPolicy",
                 fun policyBuilder ->
-                    policyBuilder.AllowAnyOrigin().AllowAnyHeader().AllowAnyMethod()
+                    // policyBuilder.AllowAnyOrigin().AllowAnyHeader().AllowAnyMethod()
                     //
-                    // Note: The URLs must not end with a /
-                    // .WithOrigins(
-                    //     [|
-                    //         env.client_url
-                    //         "http://localhost:3000"
-                    //         "https://duck-stream.doer-app.com/"
-                    //     |]
-                    // )
+                    policyBuilder
+                        .AllowAnyHeader()
+                        .AllowAnyMethod()
+                        .WithOrigins(
+                            [|
+                                env.client_url
+                                "http://localhost:3000"
+                                "https://duck-stream.doer-app.com/"
+                            |]
+                        )
                     |> ignore
             ))