diff --git a/src/oidc_test/main.py b/src/oidc_test/main.py
index f6ce405..e02a627 100644
--- a/src/oidc_test/main.py
+++ b/src/oidc_test/main.py
@@ -48,12 +48,6 @@ logger = logging.getLogger("uvicorn.error")
 templates = Jinja2Templates(Path(__file__).parent / "templates")
 
 
-origins = [
-    "https://tiptop:3002",
-    "https://philo.ydns.eu/",
-]
-
-
 @asynccontextmanager
 async def lifespan(app: FastAPI):
     await get_providers_info()
@@ -65,7 +59,7 @@ app = FastAPI(title="OIDC auth test", lifespan=lifespan)
 
 app.add_middleware(
     CORSMiddleware,
-    allow_origins=origins,
+    allow_origins=settings.cors_origins,
     allow_credentials=True,
     allow_methods=["*"],
     allow_headers=["*"],
diff --git a/src/oidc_test/settings.py b/src/oidc_test/settings.py
index 399fbac..329b9c0 100644
--- a/src/oidc_test/settings.py
+++ b/src/oidc_test/settings.py
@@ -113,6 +113,7 @@ class Settings(BaseSettings):
     secret_key: str = "".join(random.choice(string.ascii_letters) for _ in range(16))
     log: bool = False
     insecure: Insecure = Insecure()
+    cors_origins: list[str] = []
 
     @classmethod
     def settings_customise_sources(