From 3e1ac99f38b62ed43e53197ee064440d879302fc Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?K=C3=BChn?= <Leon.Kuehn@seatle.intra>
Date: Tue, 25 Aug 2026 11:38:18 +0200
Subject: [PATCH] Remove hardcoded CORS_ORIGIN default - must be set via env

---
 docker-compose.stack.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docker-compose.stack.yml b/docker-compose.stack.yml
index 166397b..f951ee6 100644
--- a/docker-compose.stack.yml
+++ b/docker-compose.stack.yml
@@ -26,7 +26,7 @@ services:
       - LDAP_UPN_SUFFIX=${LDAP_UPN_SUFFIX:-}
       - ADMIN_EMAIL=${ADMIN_EMAIL:-admin@workflow.local}
       - ADMIN_INIT_PASSWORD=${ADMIN_INIT_PASSWORD:-}
-      - CORS_ORIGIN=${CORS_ORIGIN:-http://localhost:5000}
+      - CORS_ORIGIN=${CORS_ORIGIN:-}
       - NODE_ENV=${NODE_ENV:-production}
       - DATABASE_URL=postgresql://${POSTGRES_USER:-workflow}:${POSTGRES_PASSWORD:-workflow}@db:5432/${POSTGRES_DB:-workflow}
       - SESSION_MAX_PER_USER=${SESSION_MAX_PER_USER:-5}