diff --git a/backend/main.mjs b/backend/main.mjs
index f8d908c..deac402 100644
--- a/backend/main.mjs
+++ b/backend/main.mjs
@@ -78,7 +78,13 @@ app.use(
     })
 );
 app.use(morgan('combined'));
-app.use(cors());
+
+const corsOptions = {
+    origin: ['https://alloca.space', 'https://www.alloca.space'],
+    optionsSuccessStatus: 200
+};
+
+app.use(cors(corsOptions));
 
 // POST
 const limiter20 = RateLimit({