cors

env.example

@@ -18,6 +18,10 @@ GOOGLE_CLIENT_SECRET=your_client_secret
 TERMIN_PLANNER_AUTHORIZATION_PASSWORD=your_authorization_password
 TERMIN_PLANNER_URL=your_termin_planner_url
 
+ADMIN_DASHBOARD_TELEGRAM_ENABLED=true
+ADMIN_DASHBOARD_TELEGRAM_NOTIFICATIONS_URL=
+ADMIN_DASHBOARD_TELEGRAM_NOTIFICATIONS_API_KEY=
+
 RABBITMQ_HOST=
 RABBITMQ_PORT=
 RABBITMQ_USERNAME=
@@ -32,4 +36,8 @@ LOG_MANAGER_URL=
 LOG_MANAGER_INTERVAL=
 
 STRIPE_SECRET_KEY=
-STRIPE_WEBHOOK_ENDPOINT_SECRET=
+STRIPE_WEBHOOK_ENDPOINT_SECRET=
+
+NEWSLETTER_ALLOWED_TYPES=jannex,zeitadler
+NEWSLETTER_WEBSITE_URL=https://jannex.de/newsletter/
+NEWSLETTER_PRIVACY_POLICY_URLS=https://jannex.de/datenschutz,https://zeitadler.de/datenschutz

server.ts

@@ -107,8 +107,13 @@ passport.deserializeUser(function (user: User, cb) {
   });
 });
 
-// TODO: setup cors
-app.use(cors());
+app.use(
+  cors({
+    origin: process.env.CORS_ORIGINS?.split(","), // allow to server to accept request from different origin
+    optionsSuccessStatus: 200, // some legacy browsers (IE11, various SmartTVs) choke on 204
+  })
+);
+
 app.use(cookieParser());
 app.use(useragent.express());