From e0c20cf4d154384054f1eb4a59d380151bc87c94 Mon Sep 17 00:00:00 2001
From: zyc <1439655764@qq.com>
Date: Thu, 29 Jan 2026 16:19:32 +0800
Subject: [PATCH] fix cors

---
 k8s/backend-deployment-prod.yaml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/k8s/backend-deployment-prod.yaml b/k8s/backend-deployment-prod.yaml
index ea78328..8b6b368 100644
--- a/k8s/backend-deployment-prod.yaml
+++ b/k8s/backend-deployment-prod.yaml
@@ -60,6 +60,14 @@ spec:
           value: "LTAI5tBGAkR2rra2prTAX9yc"
         - name: ALIYUN_LOG_ACCESS_KEY_SECRET
           value: "U1z3d0p5saPRD5sCxVooJYSjxSAmKB"
+          
+        # Security & CORS
+        - name: DJANGO_ALLOWED_HOSTS
+          value: "*"
+        - name: CORS_ALLOWED_ORIGINS
+          value: "https://qiyuan-rtc-web.airlabs.art,https://qiyuan-rtc-dev-web.airlabs.art"
+        - name: CSRF_TRUSTED_ORIGINS
+          value: "https://qiyuan-rtc-web.airlabs.art,https://qiyuan-rtc-dev-web.airlabs.art,https://qiyuan-rtc-api.airlabs.art"
         resources:
           requests:
             memory: "256Mi"