diff --git a/backend/src/index.js b/backend/src/index.js
index 1e73ecd..a0a631a 100644
--- a/backend/src/index.js
+++ b/backend/src/index.js
@@ -79,7 +79,10 @@ pool.connect()
   .catch(err => console.error('Database connection error:', err));
 
 // Middleware
-app.use(cors());
+app.use(cors({
+  origin: 'https://rocks.2many.ca',
+  credentials: true
+}));
 app.use(express.json());
 app.use(morgan('dev'));