diff --git a/services/caddy/Caddyfile b/services/caddy/Caddyfile
index d55054ab..133b40ce 100644
--- a/services/caddy/Caddyfile
+++ b/services/caddy/Caddyfile
@@ -8,8 +8,8 @@
     root * /var/www/html
 
     # CORS (reflect allowed origins; credentials-compatible)
-    # Allow only truckwash.dk subdomains and localhost for dev
-    @cors_origin header_regexp Origin ^https?://([a-z0-9-]+\.)?truckwash\.dk(:\d+)?$|^https?://localhost(:\d+)?$
+    # Allow truckwash.dk and truckwash.io subdomains and localhost for dev
+    @cors_origin header_regexp Origin ^https?://([a-z0-9-]+\.)?truckwash\.(dk|io)(:\d+)?$|^https?://localhost(:\d+)?$
     @options method OPTIONS
 
     header @cors_origin {