diff --git a/nodejs/server.js b/nodejs/server.js
index 4bfbb02..2852e07 100644
--- a/nodejs/server.js
+++ b/nodejs/server.js
@@ -7,7 +7,7 @@ const { Server } = require('socket.io');
 const app        = express();
 const httpServer = createServer(app);
 const io         = new Server(httpServer, {
-    cors: { origin: '*' }
+    cors: { origin: process.env.ALLOWED_ORIGIN || 'http://localhost' }
 });
 
 app.use(express.json());