diff --git a/SciPost_v1/settings/base.py b/SciPost_v1/settings/base.py
index 97591964bbf1e3eab7402380308fd852da3f9107..b889d8cd0608dbf25003d2ec0397122b86abcfe8 100644
--- a/SciPost_v1/settings/base.py
+++ b/SciPost_v1/settings/base.py
@@ -466,3 +466,9 @@ MAILGUN_API_KEY = ''
 # Get one at https://haveibeenpwned.com
 HAVE_I_BEEN_PWNED_TOKEN = get_secret('HAVE_I_BEEN_PWNED_TOKEN')
 HAVE_I_BEEN_PWNED_API_KEY = get_secret('HAVE_I_BEEN_PWNED_API_KEY')
+
+
+# CORS headers
+CORS_ALLOWED_ORIGINS = [
+    'https://scipost-codebases.org'
+]
diff --git a/SciPost_v1/settings/production.py b/SciPost_v1/settings/production.py
index 4ccda859d3e6e335da96320451275769c2071bac..f8b9247febb76375efa867f83b35ebbc7a7c5d10 100644
--- a/SciPost_v1/settings/production.py
+++ b/SciPost_v1/settings/production.py
@@ -72,9 +72,3 @@ sentry_sdk.init(
 )
 CSP_REPORT_URI = get_secret('CSP_SENTRY')
 CSP_REPORT_ONLY = False
-
-
-# CORS headers
-CORS_ALLOWED_ORIGINS = [
-    'https://scipost-codebases.org'
-]