# Mender Server CORS origin setup

**URL:** <https://hub.mender.io/t/mender-server-cors-origin-setup/5694>\
**Category:** General Discussions\
**Tags:** mender-server\
**Created:** [March 19, 2023, 5:41pm UTC](https://hub.mender.io/t/mender-server-cors-origin-setup/5694 "2023-03-19T17:41:26Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![mho](https://avatars.discourse-cdn.com/v4/letter/m/a183cd/32.png) [@mho](https://hub.mender.io/u/mho)\
**Post date:** [March 19, 2023, 5:41pm UTC](https://hub.mender.io/t/mender-server-cors-origin-setup/5694/1 "2023-03-19T17:41:26Z")

</div>

I recently tried connecting to Mender using the API from a different domain, and I am getting CORS preflight errors. The Preflight OPTIONS request is returning a 401, so I’m guessing that I haven’t configured the accessControlAllowOriginList header in the Traefik config.

This is on-premise Mender, using mender-helm.

I saw this old post, which described an ALLOWED\_HOSTS setting that I can no longer find: [Issue with cross server API access](https://hub.mender.io/t/issue-with-cross-server-api-access/1300)

I then looked for accessControlAlowOriginList in mender-helm, but did not find anything. My guess is I need to add this setting here: [mender-helm/api-gateway-configmap.yaml at master · mendersoftware/mender-helm · GitHub](https://github.com/mendersoftware/mender-helm/blob/master/mender/templates/api-gateway-configmap.yaml#L489)

Is this correct? Is there a way to set allow-origin that’s already supported by Mender’s configurations?