# Comma-separated list of allowed origins for CORS (leave empty to block all cross-origin requests)
# Example:
# CORS_ALLOWED_ORIGINS="https://yourdomain.com,https://another.com"
# For local development, you might use:
# CORS_ALLOWED_ORIGINS="http://localhost:3000"