diff --git a/k8s/backend-deployment-prod.yaml b/k8s/backend-deployment-prod.yaml
index ea78328..8b6b368 100644
--- a/k8s/backend-deployment-prod.yaml
+++ b/k8s/backend-deployment-prod.yaml
@@ -60,6 +60,14 @@ spec:
           value: "LTAI5tBGAkR2rra2prTAX9yc"
         - name: ALIYUN_LOG_ACCESS_KEY_SECRET
           value: "U1z3d0p5saPRD5sCxVooJYSjxSAmKB"
+          
+        # Security & CORS
+        - name: DJANGO_ALLOWED_HOSTS
+          value: "*"
+        - name: CORS_ALLOWED_ORIGINS
+          value: "https://qiyuan-rtc-web.airlabs.art,https://qiyuan-rtc-dev-web.airlabs.art"
+        - name: CSRF_TRUSTED_ORIGINS
+          value: "https://qiyuan-rtc-web.airlabs.art,https://qiyuan-rtc-dev-web.airlabs.art,https://qiyuan-rtc-api.airlabs.art"
         resources:
           requests:
             memory: "256Mi"