diff --git a/src/main.rs b/src/main.rs
index 748dbff..c70884b 100644
--- a/src/main.rs
+++ b/src/main.rs
@@ -49,8 +49,11 @@ async fn main() -> std::io::Result<()> {
     log::info!("starting HTTP server at http://localhost:4242");
 
     HttpServer::new(|| {
-        let mut cors = Cors::default()
-            .allow_any_origin()
+        let cors = Cors::default()
+            .send_wildcard()
+            .allowed_origin("https://tfcconnection.org")
+            .allowed_origin("http://localhost:1313")
+            .allowed_origin("http://127.0.0.1:1313")
             .allow_any_method()
             .allow_any_header()
             .max_age(3600);