diff --git a/api/routes.py b/api/routes.py
index cd872a7..8eb8597 100644
--- a/api/routes.py
+++ b/api/routes.py
@@ -25,7 +25,7 @@ def setup_routes(app: FastAPI) -> None:
     # CORS middleware
     app.add_middleware(
         CORSMiddleware,
-        allow_origins=["*"],
+        allow_origins=["http://localhost:5173", "https://allowlgroup.ru"],
         allow_credentials=True,
         allow_methods=["*"],
         allow_headers=["*"],