diff --git a/app.py b/app.py
index efe4f7f..e3928a9 100644
--- a/app.py
+++ b/app.py
@@ -55,7 +55,7 @@ from flask_socketio import SocketIO, emit, join_room, disconnect
 from database import db, init_db
 from models import User, Message, UserIgnore
 from config import (
-    SECRET_KEY, ADMIN_PASSWORD, DATABASE_URL,
+    SECRET_KEY, ADMIN_PASSWORD, DATABASE_URL, CORS_ORIGINS,
     MAX_MSG_LEN, LOBBY, AI_FREE_LIMIT, AI_BOT_NAME,
     OLLAMA_URL, VIOLET_MODEL, VIOLET_SYSTEM,
     aesgcm_encrypt, aesgcm_decrypt, issue_jwt, verify_jwt,
@@ -312,7 +312,7 @@ def create_app() -> Flask:
     socketio.init_app(
         app,
         async_mode="eventlet",
-        cors_allowed_origins="*",
+        cors_allowed_origins=CORS_ORIGINS,
         message_queue=msg_queue,
         logger=False,
         engineio_logger=False,