diff --git a/config/settings/production.py b/config/settings/production.py
index 9997512..1e441ca 100644
--- a/config/settings/production.py
+++ b/config/settings/production.py
@@ -174,3 +174,7 @@
     },
     'USE_SESSION_AUTH': False,
 }
+
+# django-cors-headers - https://github.com/adamchainz/django-cors-headers#setup
+CORS_ALLOWED_ORIGIN_REGEXES = [
+    r"^https:\/\/tmh-registry-client.*heroku.*app\.com$", r"^http:\/\/localhost.*$"]