diff --git a/game/server/app.py b/game/server/app.py
index f308d032..777b2427 100644
--- a/game/server/app.py
+++ b/game/server/app.py
@@ -37,10 +37,14 @@ app.include_router(tgos.router)
 app.include_router(waypoints.router)
 
 
+origins = []
 if ServerSettings.get().cors_allow_debug_server:
-    app.add_middleware(
-        CORSMiddleware,
-        allow_origins=["http://localhost:3000"],
-        allow_methods=["*"],
-        allow_headers=["*"],
-    )
+    origins.append("http://localhost:3000")
+
+
+app.add_middleware(
+    CORSMiddleware,
+    allow_origins=origins,
+    allow_methods=["*"],
+    allow_headers=["*"],
+)