diff --git a/docker-compose.yaml b/docker-compose.yaml
index 00969c2..c1f42da 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -10,6 +10,8 @@ services:
       - traefik.http.services.confetti-api.loadbalancer.server.port=8020
       - traefik.http.routers.confetti-api.tls=true
       - traefik.http.routers.confetti-api.entryPoints=https
-      - traefik.http.routers.confetti-api.middlewares=crowdsec-bouncer@docker
-      - traefik.http.middlewares.confetti-api.headers.accesscontrolallowmethods=GET
-      - traefik.http.middlewares.confetti-api.headers.accesscontrolallowheaders=*
\ No newline at end of file
+      - traefik.http.routers.confetti-api.middlewares=crowdsec-bouncer@docker,confetti-api-cors
+      - traefik.http.middlewares.confetti-api-cors.headers.accesscontrolallowmethods=GET,OPTIONS
+      - traefik.http.middlewares.confetti-api-cors.headers.accesscontrolallowheaders=Content-Type
+      - traefik.http.middlewares.confetti-api-cors.headers.accesscontrolalloworigin=*
+      - traefik.http.middlewares.confetti-api-cors.headers.addvaryheader=true
\ No newline at end of file