- Add STORYCOVE_CORS_ALLOWED_ORIGINS environment variable to docker-compose.yml - Include production domain https://storycove.sharyavin.synology.me in allowed origins - Update SecurityConfig to read from environment variable with fallback - Maintains localhost support for development while enabling production access - Fixes "Invalid CORS request" error on deployed application 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>