From 02761994882af0c44760e62ff29058f96e771e12 Mon Sep 17 00:00:00 2001
From: Frank <frank.van.den.berg@eleaf.com>
Date: Sat, 17 Jan 2026 19:03:25 +0100
Subject: [PATCH] Mercure cors error

---
 .env                | 4 ++--
 .env.prod           | 2 +-
 docker/compose.yaml | 4 ++--
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.env b/.env
index fe572f8..9869d87 100644
--- a/.env
+++ b/.env
@@ -75,9 +75,9 @@ MERCURE_JWT_SECRET=!ChangeThisMercureJWTSignedBySymfonySecretKey!
 MERCURE_PUBLISHER_JWT_TOKEN=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJtZXJjdXJlIjp7InB1Ymxpc2giOlsiKiJdfX0.E5b7ma4k-kA7lVGOQtICh7r2sspwX4G1iOhwtbxHQck
 MERCURE_SUBSCRIBER_JWT_TOKEN=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJtZXJjdXJlIjp7InN1YnNjcmliZSI6WyIqIl19fQ.mwSAjvbm6vOnjMoRSHMdcqapNCwyGZs1s57uLK4T3UM
 # CORS allowed origins (default)
-MERCURE_CORS_ALLOWED_ORIGINS=https://localhost:8443
+MERCURE_CORS_ALLOWED_ORIGINS="*"
 # Base URL for Mercure topics.
-MERCURE_TOPIC_BASE=https://escapepage.dev
+MERCURE_TOPIC_BASE=https://escapepage.com
 ###< mercure ###
 
 ###> docker ###
diff --git a/.env.prod b/.env.prod
index 24e79af..46d111d 100644
--- a/.env.prod
+++ b/.env.prod
@@ -21,7 +21,7 @@ SITE_BASE_URL=https://escapepage.com
 MERCURE_JWT_SECRET=55UtgFXsZu09TSTdeIA7ljK4HUo9DLkRzEB7MD5tqOLjRfAb
 MERCURE_PUBLISHER_JWT_TOKEN=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJtZXJjdXJlIjp7InB1Ymxpc2giOlsiKiJdfX0.qMVdzh7buYK78e-gwCQx7v6qCxk1Js83SAEKK-GZSrI
 MERCURE_SUBSCRIBER_JWT_TOKEN=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJtZXJjdXJlIjp7InN1YnNjcmliZSI6WyIqIl19fQ.OCnRPXfCoke27ntAxby2R5jkgpTZdw83DPq1yhvkLbw
-MERCURE_CORS_ALLOWED_ORIGINS=https://escapepage.com
+MERCURE_CORS_ALLOWED_ORIGINS="*"
 MERCURE_TOPIC_BASE=https://escapepage.com
 ###< mercure ###
 
diff --git a/docker/compose.yaml b/docker/compose.yaml
index dc2724d..aae26a0 100644
--- a/docker/compose.yaml
+++ b/docker/compose.yaml
@@ -106,8 +106,8 @@ services:
       MERCURE_CORS_ALLOWED_ORIGINS: ${MERCURE_CORS_ALLOWED_ORIGINS}
       MERCURE_PUBLISH_ALLOWED_ORIGINS: ${MERCURE_CORS_ALLOWED_ORIGINS}
       MERCURE_EXTRA_DIRECTIVES: |
-        cors_origins ${MERCURE_CORS_ALLOWED_ORIGINS}
-        # Allow anonymous subscribers in dev only
+        cors_origins "*"
+        publish_origins "*"
         anonymous
     ports:
       - "8090:80"