diff --git a/config/cors.php b/config/cors.php
index 94f07be..d83333a 100644
--- a/config/cors.php
+++ b/config/cors.php
@@ -19,7 +19,9 @@ return [
 
     'allowed_methods' => ['*'],
 
-    'allowed_origins' => ['*'],
+    'allowed_origins' => env('DEV', false)
+        ? [env('FRONTEND_DEV_URL', 'http://localhost:5173')]
+        : ['*'],
 
     'allowed_origins_patterns' => [],