fix cors_plug

config/runtime.exs

@@ -35,6 +35,11 @@ if amqp_url do
   config :policy_service, :amqp_url, amqp_url
 end
 
+cors_origin = System.get_env("CORS_ORIGIN", "*")
+
+config :cors_plug,
+  origin: cors_origin
+
 # ## Using releases
 #
 # If you use `mix release`, you need to explicitly enable the server