diff --git a/.github/workflows/prod-cd.yml b/.github/workflows/prod-cd.yml
index 483abd1..d93e598 100644
--- a/.github/workflows/prod-cd.yml
+++ b/.github/workflows/prod-cd.yml
@@ -77,7 +77,7 @@ jobs:
           PROD_DB_URL=${{ secrets.PROD_DB_URL }}
           PROD_DB_USERNAME=${{ secrets.PROD_DB_USERNAME }}
           PROD_DB_PASSWORD=${{ secrets.PROD_DB_PASSWORD }}
-          CORS_ALLOWED_ORIGINS=${{ secrets.PROD_CORS_ALLOWED_ORIGINS || 'https://crew-wiki.site, https://api.crew-wiki.site' }}
+          CORS_ALLOWED_ORIGINS=${{ secrets.PROD_CORS_ALLOWED_ORIGINS || 'https://crew-wiki.site, https://www.crew-wiki.site, https://api.crew-wiki.site' }}
           SWAGGER_SERVER_URL=${{ secrets.PROD_SWAGGER_SERVER_URL || 'https://api.crew-wiki.site' }}
           AWS_CREDENTIALS_ACCESS_KEY=${{ secrets.AWS_CREDENTIALS_ACCESS_KEY }}
           AWS_CREDENTIALS_SECRET_KEY=${{ secrets.AWS_CREDENTIALS_SECRET_KEY }}
diff --git a/src/main/resources/application-prod.yml b/src/main/resources/application-prod.yml
index b00c30f..4606cc3 100644
--- a/src/main/resources/application-prod.yml
+++ b/src/main/resources/application-prod.yml
@@ -16,7 +16,7 @@ spring:
         dialect: org.hibernate.dialect.MySQL8Dialect
 
 cors:
-  allowed-origins: ${CORS_ALLOWED_ORIGINS:https://crew-wiki.site, https://api.crew-wiki.site}
+  allowed-origins: ${CORS_ALLOWED_ORIGINS:https://crew-wiki.site, https://www.crew-wiki.site, https://api.crew-wiki.site}
 
 swagger:
   server-url: ${SWAGGER_SERVER_URL:https://api.crew-wiki.site}