diff --git a/hosts/sora/services/traefik.nix b/hosts/sora/services/traefik.nix
index a3bbeea..ad02adf 100644
--- a/hosts/sora/services/traefik.nix
+++ b/hosts/sora/services/traefik.nix
@@ -33,6 +33,11 @@
             redirectscheme.scheme = "https";
             redirectscheme.permanent = true;
           };
+          cors = {
+            headers = {
+              accessControlAllowOriginList = "https://daphbot.notohh.dev";
+            };
+          };
         };
         routers = {
           api = {
@@ -117,6 +122,7 @@
             service = "forgejo";
             tls.domains = [{main = "*.flake.sh";}];
             tls.certresolver = "production";
+            middlewares = "cors";
           };
           rustypaste-insecure = {
             rule = "Host(`i.flake.sh`)";