diff --git a/backend/src/server/app.ts b/backend/src/server/app.ts
index 863162c2b..946f87f36 100644
--- a/backend/src/server/app.ts
+++ b/backend/src/server/app.ts
@@ -58,7 +58,7 @@ export const main = async ({ db, smtp, logger, queue, keyStore }: TMain) => {
 
     await server.register<FastifyCorsOptions>(cors, {
       credentials: true,
-      origin: appCfg.SITE_URL || true
+      origin: false
     });
     // pull ip based on various proxy headers
     await server.register(fastifyIp);