diff --git a/website/content/docs/configuration/controller.mdx b/website/content/docs/configuration/controller.mdx
index 244ef0d603..f842dcb696 100644
--- a/website/content/docs/configuration/controller.mdx
+++ b/website/content/docs/configuration/controller.mdx
@@ -66,7 +66,7 @@ listener "tcp" {
 
   # Enable CORS for the Admin UI
   cors_enabled = true
-  cors_allowed_origins = ["*"]
+  cors_allowed_origins = ["yourcorp.yourdomain.com"]
 }
 
 # Data-plane listener configuration block (used for worker coordination)