From 4d2264e51ebbb1ab9e6ad38543d0d5d6a7ac3e4c Mon Sep 17 00:00:00 2001
From: Jeppe Bundgaard <jb@truckwash.dk>
Date: Tue, 17 Feb 2026 09:23:33 +0100
Subject: [PATCH] Expand CORS allowlist in Traefik to include additional
 Truckwash domains and localhost

---
 services/traefik/dynamic.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/services/traefik/dynamic.yml b/services/traefik/dynamic.yml
index 660cebcd..0ef78ee7 100644
--- a/services/traefik/dynamic.yml
+++ b/services/traefik/dynamic.yml
@@ -66,6 +66,13 @@ http:
         accessControlMaxAge: 86400
         accessControlAllowOriginList:
           - "https://truckwash.io"
+          - "https://web.truckwash.dk"
+          - "https://api.truckwash.dk"
+          - "https://truckwash.dk"
+          - "https://staging.truckwash.io"
+          - "http://localhost"
+          - "https://localhost"
+          - "https://twdev.jeppeb.dk"
         accessControlAllowMethods:
           - GET
           - POST