diff --git a/api/server.py b/api/server.py
index 24585de..5b619d6 100644
--- a/api/server.py
+++ b/api/server.py
@@ -6,7 +6,10 @@ app = connexion.App(__name__)
 app.add_api('openapi.yaml')
 
 # CORSify it - otherwise Angular won't accept it
-CORS(app.app)
+CORS(app.app, origins=[
+    "http://localhost:4200",
+    "https://base.hv.nober.de"
+])
 
 # provide the webservice application to uwsgi
 application = app.app