diff --git a/backend/config/cors.php b/backend/config/cors.php
new file mode 100644
index 0000000..069efe7
--- /dev/null
+++ b/backend/config/cors.php
@@ -0,0 +1,11 @@
+<?php
+return [
+    'paths' => ['api/*', 'sanctum/csrf-cookie'],
+    'allowed_methods' => ['*'],
+    'allowed_origins' => ['https://tide.yisroelbaum.com'],
+    'allowed_origins_patterns' => [],
+    'allowed_headers' => ['*'],
+    'exposed_headers' => [],
+    'max_age' => 0,
+    'supports_credentials' => true,
+];