From c5ec79bbb88cd9dcf8ff6f94abc7d9d85180be73 Mon Sep 17 00:00:00 2001
From: ShadowArcanist <162910371+ShadowArcanist@users.noreply.github.com>
Date: Fri, 3 Apr 2026 19:25:51 +0530
Subject: [PATCH] fix dangerous cors config for directus-with-postgresql
 service

---
 templates/compose/directus-with-postgresql.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/compose/directus-with-postgresql.yaml b/templates/compose/directus-with-postgresql.yaml
index 3aaa8f139..763944456 100644
--- a/templates/compose/directus-with-postgresql.yaml
+++ b/templates/compose/directus-with-postgresql.yaml
@@ -28,7 +28,7 @@ services:
       - REDIS_PORT=6379
       - WEBSOCKETS_ENABLED=true
       - CORS_ENABLED=${CORS_ENABLED:-true}
-      - CORS_ORIGIN=${CORS_ORIGIN:-true}
+      - CORS_ORIGIN=${CORS_ORIGIN}
       - CORS_METHODS=${CORS_METHODS:-GET,POST,PATCH,DELETE,OPTIONS}
       - CORS_ALLOWED_HEADERS=${CORS_ALLOWED_HEADERS:-Content-Type,Authorization}
       - CORS_CREDENTIALS=${CORS_CREDENTIALS:-true}